windows not activated after every sleep


  1. Posts : 4
    Windows 7 Pro SP1 x64
       #1

    windows not activated after every sleep


    hi, i have an issue in my windows 7 pro x64 system and i would be glad if someone can help me to solve it.
    The problem i noticed yesterday is that when i woke up my pc from sleep a message appeared in the right down corner of desktop saying "windows 7 build 7601 this copy of windows is not genuine".I have this pc for 5 months and never had this after a sleep. I noticed as well something else: everytime i put my windows into sleep mode when it wakes up i right click at computer-->properties and i see that the windows is not activated and i have to activate it and sometimes appears as well the message "windows 7 build 7601 this copy of windows is not genuine", when i restart i see that windows is activated.This happens now everytime when the pc goes to sleep and wakes up. I have a little suspicion that is a virus but norton, malwarebytes, norton power eraser and tdsskiller say that is clean. Finally i ran the mgadiag tool and the results are these:
    thanks for any idea:)


    Code:
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    
    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-788W3-H689G-6P6GT
    Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
    Windows Product ID: 00371-OEM-8992671-00008
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {C5BCCD2E-3A6A-4CCD-AE64-06C08EE8AA05}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.150427-0707
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
    
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C5BCCD2E-3A6A-4CCD-AE64-06C08EE8AA05}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6P6GT</PKey><PID>00371-OEM-8992671-00008</PID><PIDType>2</PIDType><SID>S-1-5-21-580412193-3220798139-819672977</SID><SYSTEM><Manufacturer>ASUS</Manufacturer><Model>All Series</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>2105</Version><SMBIOSVersion major="2" minor="7"/><Date>20140808000000.000000+000</Date></BIOS><HWID>F1983407018400F4</HWID><UserLCID>0408</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GTB Standard Time(GMT+02:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    
    Spsys.log Content: 0x80070002
    
    Licensing Data-->
    Software licensing service version: 6.1.7601.17514
    
    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00178-926-700008-02-1033-7600.0000-0052015
    Installation ID: 015022983872593246501845462876909293018805529325968355
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 6P6GT
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 9/6/2015 8:55:57 μμ
    
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:14:2015 18:51
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    
    
    HWID Data-->
    HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEA6GEy+9Cc2rK2dNY5kB5wnMj2
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            ALASKA        A M I
      FACP            ALASKA        A M I
      HPET            ALASKA        A M I
      MCFG            ALASKA        A M I
      FPDT            ALASKA        A M I
      LPIT            ALASKA        A M I
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      BGRT            ALASKA        A M I
      SLIC            ACRSYS        ACRPRDCT
      My Computer


  2. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #2

    That would probably be because the installation is counterfeit!
    You have an ACER SLIC table showing in the BIOS - but it's an ASUS motherboard - and you're using a Hewlett-Packard Product Key.
    You need to reformat and reinstall using genuine media and Key.
      My Computer


  3. Posts : 4
    Windows 7 Pro SP1 x64
    Thread Starter
       #3

    Thank you for the response and most likely this is the reason why this is happening, thanks!! I didn't understand the part: acer slic table etc...What does this mean exactly? How can be that missmatch and how can somebody do that? is windows 7 fault or the drivers?can you explain? I' m asking about the acer slic etc not about Hewlett-Packard Product Key because that is obvious.This means that i have in my pc hacked windows 7 as these from torrents? I'm asking all these because the installation was performed by the store that i bought the parts of my pc. I didn't pay for the os for some reason but i thought that the os was a general oem maybe license and of course legitimate.
      My Computer


  4. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #4


    OEM SLP: This is the key that came in Windows (from the factory). It works by connecting to a BIOS flag (the SLIC table) found only on computers from that Manufacturer. It also checks for the existence of proper matching licenses in the OS itself. Once it sees both, it self-activates every time the machine is rebooted.

    When, as in your case, there is a hacker's Activation Exploit installed, it's designed to fool Windows into seeing a SLIC table that isn't really there (although there are ways to create 'real' ones). Some are more effective at hiding themselves than others, and it all depends on the settings chosen when installing the Exploit as to whether it's easy to spot or not.
    In your case it was obvious from the moment I saw the first and last sections of the report - I just looked at the third section for confirmation.

    Since you say you didn't pay for the OS, when a OEM System Builder license alone (as a singleton license) costs around $150 - what did you think you were getting? What BS did the shop spin at you? How much did they charge for building the machine?
    No-one spends the time installing an OS without charging for it, and for the OS itself. I'd check the online prices for the parts installed (heck, I'd check that the parts installed are the parts you actually paid for!), and see what the difference is between that and the built price - that's how much you paid for his time, which probably amounts to no more than 2 hours. ... and if he has discounts with his suppliers it's going to be more than that (possibly a lot more!)

      My Computer


  5. Posts : 4
    Windows 7 Pro SP1 x64
    Thread Starter
       #5

    Look, maybe i'm not a computer expert but i'm not a fool. I purchased all computer parts in good prices and the installation of the os.The only thing i didn't pay was the os itself because i had a windows xp product key (which have expired) and when i took the machine there were windows 7. Ι assumed by mistake that a serious and known shop maybe had a mass general license so installed the os. But the technician never told me that was counterfeit and i didn't even expect that thing from that shop... Anyway the last thing i want to know if this is 100% hacked, counterfeit windows 7 and there isn't any possibility to be genuine.
    Thank you sir
      My Computer


  6. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #6

    The only way to make this system genuine is to reinstall with genuine media and Key.
    At present, you have no idea what else may have got installed along with the hack - which is itself a form of rootkit - that may be lowering your security threshholds.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 08:58.
Find Us