MGAdiag output included - I'm fairly sure i'm being strung along by a pirate/scammer but I want to be certain RRS feed

  • Question

  • The usual trajectory. The original product key is blocked and they emailed me this one when I complained. It was a shrinkwrapped package and the media and package appear to conform to the how-to-tell, but both keys seem to be MSDN sourced according to http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/a2444f34-0aff-4f29-a8ac-67e28b0c0285 etc.

    I haven't even tried to validate this - I'm too suspicious of it. This is so I can deal with the next steps on the other end. If you need more information on - if appropriate - getting the abused MSDN account shut down please let me know.



    Diagnostic Report (1.9.0027.0):
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-G8B4T-3CR33-762V6
    Windows Product Key Hash: M1hbUDTjY0y5oycnJR/eOCSVVyU=
    Windows Product ID: 00371-221-9104266-86302
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {35D4C9D5-8BC6-445E-A131-C25CDA78F861}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_rtm.101119-1850
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{35D4C9D5-8BC6-445E-A131-C25CDA78F861}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-762V6</PKey><PID>00371-221-9104266-86302</PID><PIDType>5</PIDType><SID>S-1-5-21-3597767943-1645013361-1213683970</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO.,LTD</Manufacturer><Model>MS-7576</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V3.11</Version><SMBIOSVersion major="2" minor="5"/><Date>20110524000000.000000+000</Date></BIOS><HWID>2EA83807018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 770bc271-8dc1-467d-b574-73cbacbeccd1
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00172-221-910426-00-1033-7601.0000-2692011
    Installation ID: 000700486983950042176690408454980694247335079783992060
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 762V6
    License Status: Initial grace period
    Time remaining: 41460 minute(s) (28 day(s))
    Remaining Windows rearm count: 4
    Trusted time: 9/26/2011 7:40:42 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: N/A
    HealthStatus: 0x0000000000000000
    Event Time Stamp: N/A
    ActiveX: Not Registered - 0x80040154
    Admin Service: Not Registered - 0x80040154
    HealthStatus Bitmask Output:

    HWID Data-->

    OEM Activation 1.0 Data-->

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            7576MS        A7576100
      FACP            7576MS        A7576100
      SRAT            AMD           FAM_F_10
      HPET            7576MS        OEMHPET
      MCFG            7576MS        OEMMCFG
      OEMB            7576MS        A7576100
      SSDT            A M I         POWERNOW

    Tuesday, September 27, 2011 12:00 AM


All replies

  • Windows Product ID: 00371-221-9104266-86302


    The product ID -221- Indicates a not for resale MSDN account. If you are not the account holder and you purchased this in a retail box, the box and it's contents are counterfeit. Demand an immediate refund from the seller

    For more information see this:


    and this:


    To see how good these counterfeits are becoming, see:


    You will have to purchase a legitimate windows from a legitimate retailer.


    The offer of more product keys is an attempt to get past the refund window. 

    • Marked as answer by Darin Smith MS Tuesday, September 27, 2011 9:47 PM
    Tuesday, September 27, 2011 12:15 AM
  • Please submit a confidential Counterfeit Software Report to Microsoft.  Thank you!
    Carey Frisch
    Tuesday, September 27, 2011 12:45 AM
  • No surprise to me. Because of medical issues I didn't try to install until after the refund window. I've informed the seller and will try to get them kicked off ebay if they aren't responsive. I've also generated the counterfeit software report you recommended. It will probably be mailed tomorrow. I have ordered a replacement Win7 from a known good source.

    Is there anything else I can do to help you? You have no obligation to me - I want to stick it to these people. I want to get the MSDN account they're using shut down or policed to limit their activity.  What can I do to advance that?

    Wednesday, September 28, 2011 1:06 AM
  • You don't need to do anything unless Microsoft contacts you directly (highly unlikely).  There are tens of thousands of these counterfeit copies produced in China (if not more).   The MSDN subscription was no doubt obtained fraudulently.  But it is not like there are a few rogue subscribers selling their product keys.  This is a Chinese mass production operation.  Microsoft, eBay, Paypal, Amazon, and who knows who else have long been well aware of this particular scheme and no doubt are pursuing it.  However, as with all such legal issues, don't expect any comment from the principals.  All any of us have heard back from Microsoft is that they have received our reports. 
    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Wednesday, September 28, 2011 2:43 AM