"This computer are running illegal Windows ..."


  1. Posts : 4
    Windows 7 Ultimate x64
       #1

    "This computer are running illegal Windows ..."


    In my laptop I have a Windows 7 Ultimate since 2010 received thru the paid MS Partner Program . Now I got messages like "This computer are running illegal Windows ..." . What now? Windows 10 RELEASE?

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-W3TT9-79XHT-W3FXW
    Windows Product Key Hash: bFK6w5WIlmyopINPmRwAdQDb4DI=
    Windows Product ID: 00426-948-0343594-85838
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {126F1F17-AC94-4357-9FCA-630B292F9560}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.140303-2144
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{126F1F17-AC94-4357-9FCA-630B292F9560}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-W3FXW</PKey><PID>00426-948-0343594-85838</PID><PIDType>5</PIDType><SID>S-1-5-21-2914525494-487342981-1571150563</SID><SYSTEM><Manufacturer>Acer </Manufacturer><Model>Aspire 5741 </Model></SYSTEM><BIOS><Manufacturer>Acer </Manufacturer><Version>V1.03</Version><SMBIOSVersion major="2" minor="6"/><Date>20100303000000.000000+000</Date></BIOS><HWID>A6570300018400FC</HWID><UserLCID>0416</UserLCID><SystemLCID>0416</SystemLCID><TimeZone>Hora oficial do Brasil(GMT-03:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Versão do serviço de licença do software: 6.1.7601.17514

    Nome: Windows(R) 7, Ultimate edition
    Descrição: Windows Operating System - Windows(R) 7, RETAIL channel
    Identificação da Ativação: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
    Identificação da Aplicação: 55c92734-d682-4d71-983e-d6ec3f16059f
    PID estendido: 00426-00170-948-034359-00-1046-7601.0000-1512015
    Identificação da Instalação: 020730311550999836356961941063109346113091811165088095
    URL do Certificado do Processador: SpcService Web Service
    URL do Certificado da Máquina: RacService Web Service
    URL da Licença de Uso: UseLicenseService Web Service
    URL do Certificado da Chave do Produto (Product Key): PkcService Web Service
    Chave do Produto (Product Key) Parcial: W3FXW
    Status da Licença: Licenciado
    Contagem de rearmação restante do Windows: 4
    Hora confiável: 2015/06/02 17:32:52

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 5:31:2015 09:34
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: LgAAAAAAAgABAAEAAAACAAAAAgABAAEA6GF6upowmlG69+zUyiYE1paXkntcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ACRSYS ACRPRDCT
    FACP ACRSYS ACRPRDCT
    HPET ACRSYS ACRPRDCT
    BOOT ACRSYS ACRPRDCT
    MCFG ACRSYS ACRPRDCT
    ASF! ACRSYS ACRPRDCT
    NSLI ACRSYS ACRPRDCT
    ASPT ACRSYS ACRPRDCT
    SSDT PmRef CpuPm
    SSDT PmRef CpuPm
    SSDT PmRef CpuPm
      My Computer


  2. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #2

    If KB3004394 is installed, uninstall it, and reboot twice.
    Do a Check for Updates, and install the new version of KB3004394, and any other updates.
    reboot again, and run a new MGADiag report, and post it.
      My Computer


  3. Posts : 4
    Windows 7 Ultimate x64
    Thread Starter
       #3

    new diag


    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-W3TT9-79XHT-W3FXW
    Windows Product Key Hash: bFK6w5WIlmyopINPmRwAdQDb4DI=
    Windows Product ID: 00426-948-0343594-85838
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {126F1F17-AC94-4357-9FCA-630B292F9560}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.150316-1654
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{126F1F17-AC94-4357-9FCA-630B292F9560}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-W3FXW</PKey><PID>00426-948-0343594-85838</PID><PIDType>5</PIDType><SID>S-1-5-21-2914525494-487342981-1571150563</SID><SYSTEM><Manufacturer>Acer </Manufacturer><Model>Aspire 5741 </Model></SYSTEM><BIOS><Manufacturer>Acer </Manufacturer><Version>V1.03</Version><SMBIOSVersion major="2" minor="6"/><Date>20100303000000.000000+000</Date></BIOS><HWID>A6570300018400FC</HWID><UserLCID>0416</UserLCID><SystemLCID>0416</SystemLCID><TimeZone>Hora oficial do Brasil(GMT-03:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Versão do serviço de licença do software: 6.1.7601.17514

    Nome: Windows(R) 7, Ultimate edition
    Descrição: Windows Operating System - Windows(R) 7, RETAIL channel
    Identificação da Ativação: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
    Identificação da Aplicação: 55c92734-d682-4d71-983e-d6ec3f16059f
    PID estendido: 00426-00170-948-034359-00-1046-7601.0000-1532015
    Identificação da Instalação: 020730311550999836356961941063109346113091811165088095
    URL do Certificado do Processador: SpcService Web Service
    URL do Certificado da Máquina: RacService Web Service
    URL da Licença de Uso: UseLicenseService Web Service
    URL do Certificado da Chave do Produto (Product Key): PkcService Web Service
    Chave do Produto (Product Key) Parcial: W3FXW
    Status da Licença: Licenciado
    Contagem de rearmação restante do Windows: 4
    Hora confiável: 2015/06/04 09:55:59

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 5:31:2015 09:34
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LgAAAAAAAgABAAEAAAACAAAAAgABAAEA6GF6upowmlG69+zUyiYE1paXkntcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ACRSYS ACRPRDCT
    FACP ACRSYS ACRPRDCT
    HPET ACRSYS ACRPRDCT
    BOOT ACRSYS ACRPRDCT
    MCFG ACRSYS ACRPRDCT
    ASF! ACRSYS ACRPRDCT
    NSLI ACRSYS ACRPRDCT
    ASPT ACRSYS ACRPRDCT
    SSDT PmRef CpuPm
    SSDT PmRef CpuPm
    SSDT PmRef CpuPm
      My Computer


  4. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #4

    That looks fine now.
    You should no longer be getting notifications.
      My Computer


  5. Posts : 4
    Windows 7 Ultimate x64
    Thread Starter
       #5

    That is the problem, I still getting such screens " ... illegal windows copy ..."!

    I did the activation process several times, thru different ways, always with a success result. I am able to run the windows update. The system option in the Control Panel shows my windows number and an activated status, but the screen returns.

    I was wondering if it is some trick from Microsoft to prevent the future Windows 10 free download.
      My Computer


  6. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #6

    No - it's likely the result of a race condition.
    This can be the result of a number of programs attempting to access the same resources at the same time. Commonly, it's a problem with certain Anti-Virus programs and other security software (including the built in Software Protection Platform). Sometimes it can be malware-related.

    What Anti-Virus is currently installed?
    What other security software is installed?
    What other AVs have ever been installed on this system?


    Please download and install Malwarebytes Anti-malware (free version) from http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM Premium' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.

    Quarantine everything it finds
      My Computer


  7. Posts : 4
    Windows 7 Ultimate x64
    Thread Starter
       #7

    Problem solved!


    Malwarebytes Anti-malware (free version) cleaned the malware that caused the wrong message. Thank you.
      My Computer


  8. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #8

    Great!

    Good luck.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:53.
Find Us