Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Win7 Pro x64 - Confirm tampered installation - Updates disabled

12 Apr 2015   #1
monokoi

Windows 7 Pro x64
 
 
Win7 Pro x64 - Confirm tampered installation - Updates disabled

I've purchased a cheap entry level pc for the family. It comes with Win7 Pro x64 preinstalled and activated (genuine). No key / COA was included. Upon launching the update utility I received the following error message:

Windows Update Cannot Check For Updates, Because The Service Is Not Running

The windows fix-it did not work, no error was returned.
(https://support.microsoft.com/en-gb/kb/2730071/en-us)

An attempt to repair it manually failed.
CMD "net start bits" & "net start wuauserv"
(Error returned: Service is already running)

CMD slmgr.vbs /dli returned: OEM_COA_SLP
There is no sticker (key) on or in the PC.

Digging through the single star reviews of this market place dealer, I've read that other customers have the same issues and also did not receive a sticker / key. They also report the seller argues the customer must have removed it or it may have come off by itself, when confronted.


How can I validate / check if the seller has installed an illegal copy or tampered with the system to prevent updates, please?



My System SpecsSystem Spec
.
13 Apr 2015   #2
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

Please post the MGADiag report - it's VERY likely this is counterfeit. (and someone may already have posted a similar report.


Please follow this tutorial and post an MGADiag report

http://www.sevenforums.com/windows-updates-activation/234159-windows-genuine-activation-issue-posting-instructions.html

Ignore errors produced when clicking on the Copy button - they simply mean that the tool could not create the backup files for some reason. The data is still copied to the clipboard for pasting to your response.

Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
http://www.microsoft.com/en-us/howtotell/Hardware.aspx
My System SpecsSystem Spec
13 Apr 2015   #3
monokoi

Windows 7 Pro x64
 
 

Thank you for your reply NoelDP.

Just read your posts on the techsupportforum regarding MGA results. Can't say I've understood all of it yet, but found it very interesting. Thank you very much for sharing your knowledge!

There is no COA sticker. Here's the result of the MGA tool:

Code:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-RXRBW-4Y296-FYX3P
Windows Product Key Hash: RiEhE/GGUSoVGA+EQPZjJk4NvSo=
Windows Product ID: 00371-OEM-9311716-57735
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {CB8C49F2-14E2-413A-BDC7-C8693229F34F}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130828-1532
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{CB8C49F2-14E2-413A-BDC7-C8693229F34F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FYX3P</PKey><PID>00371-OEM-9311716-57735</PID><PIDType>8</PIDType><SID>S-1-5-21-3928150652-2756980015-3035233101</SID><SYSTEM><Manufacturer>BIOSTAR Group</Manufacturer><Model>J1900NH2</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>5.6.5</Version><SMBIOSVersion major="2" minor="8"/><Date>20140512000000.000000+000</Date></BIOS><HWID>C23F3107018400F8</HWID><UserLCID>0407</UserLCID><SystemLCID>0407</SystemLCID><TimeZone>Mitteleuropäische Zeit(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Softwarelizenzierungsdienst-Version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Beschreibung: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Aktivierungs-ID: da22eadd-46dc-4056-a287-f5041c852470
Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Erweiterte PID: 00371-00186-117-157735-02-1031-7601.0000-0722015
Installations-ID: 003324590323590750524316111956045936389354362875643900
Prozessorzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88338
Computerzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88339
Lizenz-URL verwenden: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key-Zertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88340
Teil-Product Key: FYX3P
Lizenzstatus: Lizenziert
Verbleibende Windows Rearm-Anzahl: 4
Vertrauenswürdige Zeit: 13.04.2015 09:20:17

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:12:2015 13:41
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEAAgABAAEAAAACAAAAAQABAAEAJJS4SyB68lDQJYzXCqREvDJfqMhO3g==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            ALASKA        A M I 
  FACP            ALASKA        A M I 
  HPET            ALASKA        A M I 
  MCFG            ALASKA        A M I 
  FPDT            ALASKA        A M I 
  LPIT            ALASKA        A M I 
  BHMB            ALASKA        A M I 
  SSDT            PmRef        CpuPm
  SSDT            PmRef        CpuPm
  SSDT            PmRef        CpuPm
  UEFI            ALASKA        A M I
My System SpecsSystem Spec
.

14 Apr 2015   #4
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

While the MGADiag report shows this system as genuine, I have my doubts.
1) The system appears to have been built in 2014 using a retail motherboard.
2) The Product Key in use is a OEM_COA_SLP Key - which is only found on machines manufactured by large companies like HP or Dell.
3) You say you have no COA sticker - which means that the machine doesn't have a license!

The install must be considered counterfeit.

Installs of ALL OEM licenses MUST have a COA sticker on the case - or the vendor is in breach of the terms of their license. It's that simple . This ensures that each machine has a unique product Key.
If the vendor comes back and tries to say anything about 'downgrades' - that's not relevant, because there are no signs of a Windows 8 install either, and the downgrade licenses are ALL OEM_SLP type rather than OEM_COA_SLP.
My System SpecsSystem Spec
14 Apr 2015   #5
monokoi

Windows 7 Pro x64
 
 

Thank you for your reply and taking the time to look into the report.

What I'd still really like to know is: can I check if the update settings have been changed to prevent updates?
My System SpecsSystem Spec
Reply

 Win7 Pro x64 - Confirm tampered installation - Updates disabled




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Windows Check for updates keeps running-all installation/updates fail
I have never posted on a forum before so apologies if I am doing this wrong. The problem started when I tried to plug in my (new) iphone to my Dell pc. The device was not detected so I tried to update my itunes software - update failed and I received a Windows 7 error. After searching through...
Windows Updates & Activation
Tampered with the registry and now I cannot log-on
Basically I deleted what I thought to be a virus from within the registry. The path I took was HKEY_LOCAL_MACHINE > SOFTWARE > Wow6432Node. Wow6432Node is the directory I deleted. I then noticed that I couldn't run any programs on my desktop as a error message would appear (I can't remember what it...
General Discussion
Previous updates disabled my CPU and I want to disable future updates
Until about 3 weeks ago, my Dell laptop was set to download and install Windows updates automatically. It did so, periodically. But I noticed that about 3 weeks ago, around January 20, 2014, updates were downloading and installing daily. At least three days in a row. One such update completely...
Performance & Maintenance
Disabled USB after 5/11/2011 updates
For two days in a row I had to go and do a system restore in order to use my keyboard and mouse. This morning I wake up and again updates shut the USB port down. The updates being installed are Update for Windows 7 (KB2533552) Windows Malicious Software Removal Tool - May 2011 (KB890830) Update...
Windows Updates & Activation
Updates Disabled - Really Disabled!!
Hi all.... Have just sorted an issue on a friends laptop, but noticed this while checking things out.... as this is Home Premium there is no group policy editor to try and enable updates through that, so if anyone knows the (possible) registry keys, or any other method to enable updates, I'd be...
Windows Updates & Activation
Ethernet disabled after updates installed
I have recently installed Windows 7 on 2 computers. The first installed without a hitch and everything is working fine. I proceeded next to install it on my computer. The parts are slightly older but should not make a difference. Anyways, 3 times now, after fresh installs, the updates don't...
Windows Updates & Activation


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 04:53.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App