Counterfeit Software Error

[rosede]

I have a headless Windows 7 Pro machine. The machine just runs, and I rarely have any issues with it. However, a couple of day's ago, the machine hung, and I had to power cycle it.

Today I RDP'd in and saw a warning that my OS is counterfeit and that I had to register it. I did a little research and saw the key is different than what I originally registered it with. I tried putting in the correct key, but received an error telling me that it was invalid.

How could the key have changed, and why won't it accept the key that I built the machine with? What do I need to look at? Any particular log files that I can review?

Thanks

Daryl

 

[torchwood]

Hi Daryl,

run this tool against the RDP, copy/paste the output.
http://go.microsoft.com/fwlink/?LinkID=52012

No need to change any detail in it

As you had to register it in the first place i have to assume its a Retail key

Roy

 

[rosede]

Hi Daryl,

run this tool against the RDP, copy/paste the output.
http://go.microsoft.com/fwlink/?LinkID=52012

No need to change any detail in it

As you had to register it in the first place i have to assume its a Retail key

Roy

Roy,

As requested, please find the output from the command,

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: 0xc004c4a2
Windows Product Key: *****-*****-*****-*****-YQC7F
Windows Product Key Hash: /6Prb6hx4RO4jQWfF3cLh4UDZf8=
Windows Product ID: 55041-051-0492247-86102
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {FA86B0C2-2AA9-4973-9218-110F4F92AF70}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr.170913-0600
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{FA86B0C2-2AA9-4973-9218-110F4F92AF70}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-051-0492247-86102</PID><PIDType>6</PIDType><SID>S-1-5-21-3650742545-1419972384-2164389177</SID><SYSTEM><Manufacturer>GIGABYTE</Manufacturer><Model>GB-BXi5-5200-BN</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>F3</Version><SMBIOSVersion major="2" minor="8"/><Date>20150225000000.000000+000</Date></BIOS><HWID>15F70200018400F2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 55041-00172-051-049224-03-1033-7601.0000-3102017
Installation ID: 015310530271678915297776461003473620211833233511841886
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: YQC7F
License Status: Notification
Notification Reason: 0xC004F200 (non-genuine).
Remaining Windows rearm count: 3
Trusted time: 11/6/2017 5:07:06 PM
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C4A2
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:5:2017 06:11
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
 
HWID Data-->
HWID Hash Current: KAAAAAAAAQABAAEAAAABAAAAAQABAAEAln0IwBTP7jXmKrAHTgK6LA==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name OEMID Value OEMTableID Value
  APIC   ALASKA  A M I 
  FACP   ALASKA  A M I 
  HPET   ALASKA  A M I
  MCFG   ALASKA  A M I
  FPDT   ALASKA  A M I 
  FIDT   ALASKA  A M I 
  SSDT   SataRe  SataTabl
  UEFI     
  SSDT   SataRe  SataTabl
  ASF!   INTEL    HCG
  SSDT   SataRe  SataTabl
  SSDT   SataRe  SataTabl
  TPM2     Tpm2Tabl
  SSDT   SataRe  SataTabl
  SSDT   SataRe  SataTabl
  DMAR   INTEL   BDW 
  SSDT   SataRe  SataTabl

What exactly are you looking for? I don't see anything out of the ordinary, but I'm not sure what I should be looking for either.

Thanks

Daryl

 

[torchwood]

Hi Daryl,

from the report its telling me its a Volume licence key,
possibly in this case -- Technet Plus, these are subscrition based keys and are only sold directly from MS
This program was dropped in 2013, and the keys are gradually being retired, ie blocked

You could try googling the last 3 blocks of your key, if you get multiple hits its likely that they were sold on the open market, and MS is blocking it.

So the question is where did you get it.


Roy

 

[rosede]

Hi Daryl,

from the report its telling me its a Volume licence key,
possibly in this case -- Technet Plus, these are subscrition based keys and are only sold directly from MS
This program was dropped in 2013, and the keys are gradually being retired, ie blocked

You could try googling the last 3 blocks of your key, if you get multiple hits its likely that they were sold on the open market, and MS is blocking it.

So the question is where did you get it.


Roy

Roy,

I bought this particular key online. The original key is being used for another install, so I found a seller online and purchased the key.

I didn't see any bad review of this vendor, so I took a chance that they were selling valid key's. Appears they are not legitimate, and I need to find a new vendor. Is there a reputable online vendor that I can purchase a key from?

Thanks.

Daryl

 

[torchwood]

Hi Daryl,

Over your side of the pond, Newegg.

Seen a few of these popping up lately.


Roy

 

[rosede]

Hi Daryl,

Over your side of the pond, Newegg.

Seen a few of these popping up lately.


Roy

The issue is, $150 is a lot to pay for an 8 year OS that has only 2 years left until EOL.

Will this OS continue to run until I figure out what I want to do, or will it stop running in 30 days?

Thanks

Daryl

 

[RoasterMen]

It should still function after the expiration date, but features will be limited but not enough to make it hard for everyday use.

This what will happen if you don't activate after 30 days:

This is from Microsoft

If you don’t activate your Windows software
- You will be prompted every time you log in to Activate.
- You will receive periodic prompts to activate your software.
- Certain visual experiences will be disabled such as the Windows Aero Glass theme.
- Won't be able to update software such as Microsoft Security Essentials.
​

 

[GEWB]

What is the function of this headless unit? Server of some sort for some reason? If so, can the OS be replaced by Linux?

Regards,
GEWB