Win 7 activation N/A. slui.exe Access Denied. Genuine? MGA inside

win2curious · 13 Jul 2013

Bought a Lenovo T61 laptop with Win 7 Pro from craiglist.
Windows Updates, Internet etc. works fine.
Didn't get any 'Copy may not be genuine, victim of counterfeting' popup.
But the Activation section under System Properties is missing.
When I tried running slui.exe, it says Access Denied, even though the file is there in system32.
I tried switching to Hidden admin account, no use.

MGA:

Code:

Diagnostic Report (1.9.0019.0): 
----------------------------------------- 
WGA Data--> 
Validation Status: Genuine 
Validation Code: 0 
 
Cached Validation Code: N/A, hr = 0xc004f012 
Windows Product Key: *****-*****-MV8MH-98QJM-24367 
Windows Product Key Hash: wgci5Gdejx4esg7++zTOe3LWF+4= 
Windows Product ID: 00371-OEM-8992671-00437 
Windows Product ID Type: 2 
Windows License Type: OEM SLP 
Windows OS version: 6.1.7601.2.00010100.1.0.048 
ID: {9295C61D-A62C-4558-A7C4-06402A0D38AA}(3) 
Is Admin: Yes 
TestCab: 0x0 
WGA Version: N/A, hr = 0x80070002 
Signed By: N/A, hr = 0x80070002 
Product Name: Windows 7 Professional 
Architecture: 0x00000000 
Build lab: 7601.win7sp1_gdr.130505-1534 
TTS Error:  
Validation Diagnostic:  
Resolution Status: N/A 
 
WgaER Data--> 
ThreatID(s): N/A, hr = 0x80070002 
Version: N/A, hr = 0x80070002 
 
WGA Notifications Data--> 
Cached Result: N/A, hr = 0x80070002 
File Exists: No 
Version: N/A, hr = 0x80070002 
WgaTray.exe Signed By: N/A, hr = 0x80070002 
WgaLogon.dll Signed By: N/A, hr = 0x80070002 
 
OGA Notifications Data--> 
Cached Result: N/A, hr = 0x80070002 
Version: N/A, hr = 0x80070002 
OGAExec.exe Signed By: N/A, hr = 0x80070002 
OGAAddin.dll Signed By: N/A, hr = 0x80070002 
 
OGA Data--> 
Office Status: 109 N/A 
OGA Version: N/A, 0x80070002 
Signed By: N/A, hr = 0x80070002 
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 
 
Browser Data--> 
Proxy settings: N/A 
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) 
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe 
Download signed ActiveX controls: Prompt 
Download unsigned ActiveX controls: Disabled 
Run ActiveX controls and plug-ins: Allowed 
Initialize and script ActiveX controls not marked as safe: Disabled 
Allow scripting of Internet Explorer Webbrowser control: Disabled 
Active scripting: Allowed 
Script ActiveX controls marked as safe for scripting: Allowed 
 
File Scan Data--> 
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385] 
 
Other data--> 
Office Details: <GenuineResults><MachineData><UGUID>{9295C61D-A62C-4558-A7C4-06402A0D38AA}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-24367</PKey><PID>00371-OEM-8992671-00437</PID><PIDType>2</PIDType><SID>S-1-5-21-4281886315-328512593-282661049</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>7664A19</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7LETB2WW (2.12 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20080220000000.000000+000</Date></BIOS><HWID>4A223D07018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7L   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>   
 
Spsys.log Content: 0x80070002 
 
Licensing Data--> 
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs". 
 
Windows Activation Technologies--> 
HrOffline: 0x80070005 
HrOnline: 0x00000000 
HealthStatus: N/A 
Event Time Stamp: 7:13:2013 19:15 
WAT Activex: Registered 
WAT Admin Service: Not Registered - 0x80070005 
 
HWID Data--> 
HWID Hash Current: OAAAAAEABwABAAEAAAABAAAAAgABAAEAJJRKdpdjLggALRqfgIVGg7BUBgw4V1jQbLXMsuBQRso= 
 
OEM Activation 1.0 Data--> 
N/A 
 
OEM Activation 2.0 Data--> 
BIOS valid for OA 2.0: yes 
Windows marker version: 0x0 
OEMID and OEMTableID Consistent: yes 
BIOS Information:  
  ACPI Table Name    OEMID Value    OEMTableID Value 
  APIC            LENOVO        TP-7L    
  FACP            LENOVO        TP-7L    
  HPET            LENOVO        TP-7L    
  BOOT            LENOVO        TP-7L    
  MCFG            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L    
  ECDT            LENOVO        TP-7L    
  TCPA            LENOVO        TP-7L    
  SLIC            LENOVO        TP-7L    
  ASF!            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L

dwarfer66 · 13 Jul 2013

I think you have a definite cracked copy, I think from what I have seen it has had Remove WAT used on it (remove windows activation tech). Would not recommend bying from places like that. Sorry for your probs.

win2curious · 13 Jul 2013

awhh..
I actually bought 2 laptops from the guy - T60 & T61. On T60, I was able to install Security Essentials fine.

But on this T61, it didn't install, saying 'could not validate genuine Windows'.
Only then I realized both machines didn't have the 'Activation section' under System Properties.

How long will Windows work until it starts to give that Counterfeit popup ?

Also, why does Windows Update work on cracked copies ?? I assumed that was the test for genuinity !

Diosoth · 13 Jul 2013

win2curious said:

Also, why does Windows Update work on cracked copies ?? I assumed that was the test for genuinity !

Microsoft tried to kill support for that back with Windows XP but they caught a lot of bad press for it. Unpatched systems can be a breeding ground for malware to spread. Forcing pirated users to go unpatched could be a further security and malware risk to the internet and other Windows users.

Golden · 14 Jul 2013

This is definitely counterfeit.

Code:

Diagnostic Report (1.9.0019.0): 
----------------------------------------- 
WGA Data--> 
Validation Status: Genuine 
Validation Code: 0

MGA does not report "Genuine" in the Validation status, but more importantly, this computer is far too old to be running an OEM installation.

Code:

Windows License Type: OEM SLP
<Date>20080220000000.000000+000</Date>

Purchase a retail copy of Windows 7, then format and reinstall from fresh.

dwarfer66 · 14 Jul 2013

I thought it was, I have seen it on other comps.

win2curious · 14 Jul 2013

Code:

MGA does not report "Genuine" in the Validation status

HUH ! I just ran the tool on another xp machine with a key that matches COA, and it said 'Genuine' in green font. Is that fake too ?!

Golden · 14 Jul 2013

I just realised you are running an older version of MGADIAG (perhaps the older version did indeed use the word "Genuine"....I cant remember).

For posterity, you can run the current version of MGADIAG using the instructions below, but the fact remains your BIOS date is too early for an OEM so the installation remains counterfeit.

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click Copy - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the tool here in your next reply

win2curious · 14 Jul 2013

Done, and attached 2 files.
MGAdiag version 1.9.0027.0

win7_bad_mga.txt - is this counterfeit ?
winxp_good_mga.txt - is this legit ?

Golden · 15 Jul 2013

Windows 7 is counterfeit.....evidence of RemoveWAT installled and date of computer predates Windows 7 OEM release

Not sure about XP.....I'll ask Noel to have a look