Windows not genuine - 7 Ultimate - Build 7601

ChicITChick · 06 Aug 2012

I have a Dell Latitude E5500 running Windows 7 Ultimate that warns it is not genuine.

I am the new IT person at my company. This laptop was issued to a salesperson before I came here. The salesperson is no longer with us and returned the laptop. Laptop was not on the domain and I did not know the user's password so I used a Password Reset utility (I have sucessfully used several times with Win XP.) To activate and reset the Administrator password. (This modifies registry entries)

Upon logging in I see the laptop is reporting as software not genuine. Oddly
enough I was able to install SP1.

I went through the recreating Licensing Store with no change. The COA sticker is not on the laptop but I ran Magic JellyBean keyfinder and reentered the key with equally dissappointing results.

My boss thinks this laptop was "rebuilt" by a company they have used in the past for support. This company is very reputable and I find it unlikely they would use counterfeit software.

I have read several threads but I did not see anything that matches mine. I apologize in advance if the answer was under my nose and I did not see it.

Now that you have my life story my diagnostic printout below:

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: 0xc004c4ab
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {7329116E-4314-44B7-99C7-963F5ECE9E11}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.120330-1504
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Basic 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7329116E-4314-44B7-99C7-963F5ECE9E11}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-2697538351-93632623-1753803413</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E5500                  </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="4"/><Date>20081124000000.000000+000</Date></BIOS><HWID>E5BA3607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0013-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Basic 2007</Name><Ver>12</Ver><Val>2D2994C1D40CDC0</Val><Hash>Z92b9dZXGRIwnG4OYDDNnL6U5nQ=</Hash><Pid>89445-OEM-6473654-46803</Pid><PidType>4</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7601.0000-2192012
Installation ID: 000380585491576154913996513255878210198375710655603174
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: P4K27
License Status: Notification
Notification Reason: 0xC004F200 (non-genuine).
Remaining Windows rearm count: 4
Trusted time: 8/6/2012 2:49:15 PM
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C4AB
HealthStatus: 0x0000000000000000
Event Time Stamp: 8:6:2012 14:37
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: MgAAAAEAAgABAAIAAAACAAAAAgABAAEAJJSExV1J1q96f7APEIe4mmZK1F9sbOpRKoU=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name OEMID Value OEMTableID Value
  APIC   DELL    M09    
  FACP   DELL    M09    
  HPET   DELL    M09    
  MCFG   DELL    M09    
  ____   DELL    M09    
  ASF!   DELL    M09    
  TCPA     
  SLIC   DELL    QA09   
  SSDT   PmRef  CpuPm

Thank you in advance for all of your help.

NoelDP · 06 Aug 2012

WAT has discovered a hacker's Activation Exploit, attempting to spoof Windows Activation and validation.
The machine was built a year before Windows 7 was launched - but the Exploit is attempting to simulate a valid Win7 SLIC table in the BIOS.

For what version and edition of Windows is the computer licensed, according to the COA sticker on the case??
It's almost certainly Vista of some kind - and unless you have a valid Upgrade license for this machine, then that's the only OS that should be installed here.

ChicITChick · 06 Aug 2012

Noel thanks so much. The COA sticker is gone. This is the first time I laid hands on this device so I do not know it's history.

We did have a person here for a couple of months and seeing his previous work I wouldn't put it past him to use counterfeit software. Looks like it's time to pony up for some software.

NoelDP · 07 Aug 2012

Other than that, it may be that the machine was delivered without an OS, but you should be able to check that by using the Service Tag and checking on the Dell site for the shipping configuration.

Check the Battery compartment - it's around that time that Dell started putting the COA tags inthere.

ChicITChick · 07 Aug 2012

Right again! There is a Vista COA under the battery.

Geez I feel stupid. I've been wondering why my users with newer laptops didn't have a COA on them.

NoelDP · 07 Aug 2012

It gets a lot of people that way - don't worry about it :)
So at least teh system is licensed for Vista, if not Win7 - Is it Business, or Home Premium?
How many machines are you 'looking after'? - is it worth you getting a Volume License to cover them all, so you can upgrade them legally?

ChicITChick · 07 Aug 2012

It's licensed Vista Business but probably shipped with XP Pro (I have a few around here like that).

I have 30ish computers with about 75% running XP Pro and 25% running 7 Pro. Almost all are joined to the domain. I do have some outside salespeople that only come in about once a year. Someday I would love to look at volume licensing. (Oh to be able to create images and PXE boot all the devices in the house!)

Thanks for all of your help. My first impression when I got into the laptop was "Well carp! The guy who was here before me installed illegal software." Then I remembered hearing about a lot of problems activating 7 and so I was hoping my initial reaction was wrong. Sadly it was not.

Everything else here is legal, I don't play when it comes to the Microsoft police.

NoelDP · 07 Aug 2012

With that number of computers, Volume licensing does begin to make sense in terms of reduced management costs.
I'd start working up a business case for it, if I was you :)
Good Luck!

Algyyys · 09 Sep 2012

I have a Dell Studio XPS running Windows 7 Home Premium that warns it is not genuine.
Basically problem started coupe month ago. My PC started crash nearly every day and I decided to re-install Window 7 . But what I did ( I think its main problem)- I mistakenly install my wife`s or daughter`s Windows7. When I checked COA sticker and find out that is different than shown on my diagnostic printout. I found my original Windows 7 , but ...I don't `t want to re-install all again. What can I do ? I apologize in advance if the answer was under my nose and I did not see it. Thank you.

My diagnostic printout below:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 50
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82
Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=
Windows Product ID: 00359-OEM-8992687-00095
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {ADB8C1CA-DCCF-4EE8-980D-9D76F421B176}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Standard 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Algis\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{ADB8C1CA-DCCF-4EE8-980D-9D76F421B176}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-2288800483-888431449-1431355434</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Studio XPS 8100</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A05</Version><SMBIOSVersion major="2" minor="6"/><Date>20100708000000.000000+000</Date></BIOS><HWID>03353607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>FX09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0012-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard 2007</Name><Ver>12</Ver><Val>9F79F366E48B76E</Val><Hash>aU3DFXhLEMWzAqKJlRLx6dsdU04=</Hash><Pid>81607-951-1208325-64081</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800095-02-1033-7601.0000-2172012
Installation ID: 017371815264956110441214072174602905057933669433426686
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: RMV82
License Status: Notification
Notification Reason: 0xC004F063.
Remaining Windows rearm count: 3
Trusted time: 9/9/2012 2:19:23 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C533
HealthStatus: 0x0000000000000000
Event Time Stamp: 9:3:2012 23:22
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: NAAAAAEAAAABAAEAAQAFAAAAAgABAAEAln2EHohAWocwZVCZQn0QegTWPW3bdDDdXuV2Vg==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL FX09
FACP DELL FX09
HPET DELL OEMHPET
MCFG DELL OEMMCFG
SLIC DELL FX09
OSFR DELL FX09
OEMB DELL FX09
ASF! LEGEND I865PASF
SSDT DpgPmm CpuPm

Thank you in advance for all of your help.

NoelDP · 09 Sep 2012

Please post your MGADiag report to a new thread for proper attention.
Having said that, you need to change the Produt Key to the one on your COA sticker and activate that.