MGADiag Tool report attached - genuine or not? And then what?

[silverfx]

I have run a precautionary MGADiag report, before I go ahead and attempt a clean reinstall of Win 7 Ultimate x64 on my Acer E1-571 laptop, since I found the product id and key for the current installation advertised on a number of websites.

The laptop, bought in Asia, came with no disk, and the hidden recovery partition is missing (possibly I deleted it, possibly it was never there)

The full story in my initial post here:
http://www.sevenforums.com/installa...w-clean-install-without-disk.html#post3183671

Torchwood recommended getting the activation checked before I attempt a reinstallation, so here I am, on tenterhooks...

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-V9488-FGM44-2C9T3
Windows Product Key Hash: rmk1OjF0iZq7gQoRmEcpnJHr0oc=
Windows Product ID: 00426-OEM-8992662-00010
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {D4D26144-4A16-4460-9E24-39B665BB39B6}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.151019-1254
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{D4D26144-4A16-4460-9E24-39B665BB39B6}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-2C9T3</PKey><PID>00426-OEM-8992662-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-2639829485-2963564718-506861842</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire E1-571</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V2.07</Version><SMBIOSVersion major="2" minor="7"/><Date>20121015000000.000000+000</Date></BIOS><HWID>AAE33807018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-WKS</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="1.7.105.35"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600010-02-1054-7601.0000-2012012
Installation ID: 017484914862435472627506102496719694084375488460050591
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 2C9T3
License Status: Licensed
Remaining Windows rearm count: 1
Trusted time: 29/11/2015 21:46:53

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAQABAAAAAwABAAEA6GG8alTsvolwqSIN/KKmGIBCJoBEYpZj

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            ACRSYS        ACRPRDCT
  FACP            ACRSYS        ACRPRDCT
  DBGP            ACRSYS        ACRPRDCT
  HPET            ACRSYS        ACRPRDCT
  BOOT            ACRSYS        ACRPRDCT
  MCFG            ACRSYS        ACRPRDCT
  UEFI            ACRSYS        ACRPRDCT
  ASF!            ACRSYS        ACRPRDCT
  SLIC            HPQOEM        SLIC-WKS
  SSDT            ACRSYS        ACRPRDCT
  ASPT            ACRSYS        ACRPRDCT
  FPDT            ACRSYS        ACRPRDCT
  SSDT            ACRSYS        ACRPRDCT
  SSDT            ACRSYS        ACRPRDCT

What's the verdict and what are my options?

Thanks guys.

 

[alphanumeric]

It's likely genuine. The original factory Windows 7 OEM-SLP install activates against a SLIC table in the BIOS. That will only work if you install with the matching factory install media. Those OEM_SLP keys are blocked from online activation. They are also listed on web sites so you'll get hits if you Google them. The original factory OEM-SLP key will not activate online. You need the key on the COA sticker if your using standard install media. Remove the battery and have a look in the battery compartment. They sometimes hide it in there so it doesn't get damaged and unreadable.

 

[silverfx]

It's likely genuine? JC that's made my day!

I will still need to pay for factory install media from Acer and installing from a downloaded ISO won't work, right, because the keys would be different. Unless I could change the key on the SLIC table, mwahahahaha, just kidding

Hmmm, well, maybe things could have been worse, like my bios could have corrupted or the whole thing could have blown up. And it's only £50 pounds (£50 pounds?! I could eat for a week off that!) Expensive mistake, that's the last time I go and delete the hidden partition, if that's what I did.

 

[torchwood]

oops

Hi Silver,
Thats a HP code not Acer, therfor the installation would be classified as counterfiet.

Roy

 

[alphanumeric]

I'm no expert at reading MGAdiag reports but it looks good to me. it says Description: Windows Operating System - Windows(R) 7, OEM_SLP channel and OEMID and OEMTableID Consistent: yes. Hopefully somebody else in the know can confirm it.

 

[alphanumeric]

Dame, now that you mention it, there is one HP entry in the SLIC? Somebody flashed it with a modified BIOS maybe? If true I'm thinking the Acer media won't work, the certificate file and SLIC table won't match?

 

[silverfx]

Hi Silver,
Thats a HP code not Acer, therfor the installation would be classified as counterfiet.

Roy

I'm no expert at reading MGAdiag reports but it looks good to me. it says Description: Windows Operating System - Windows(R) 7, OEM_SLP channel and OEMID and OEMTableID Consistent: yes. Hopefully somebody else in the know can confirm it.

When I saw the OEM_SLP channel and OEMID and OEMTableID Consistent, I admit, I was hopeful, but I was just thinking, even if it's an HP code and the installation would be classed as counterfeit, I can just go ahead and order the factory install media from Acer, right, and the key on the install media will match the key on the SLIC table, unless.....the HP code you refer to Roy, is in the SLIC table and then wouldn't match the key on the install media? This is what I was afraid of, paying for the recovery media and finding out it doesn't work, and having to buy yet another license, either OEM as advertised on Amazon or full retail. If that's the case, I should cut my losses and head straight to Amazon/elsewhere. Will showkey or something shed any further light on this?

Damn, what a saga. Talking of flashed BIOS, they could have flashed it with anything right, what a mess. I will eventually be able to update the BIOS with the proper Acer driver, and rule out any other nefarious writes, including malware, to the bios, right? What a can of worms, but thanks guys, better to know, than not to.

 

[silverfx]

So this HP reference indicating a flashed bios, does this mean that whoever did it (the store I bought it from, or their suppliers) had access to HP install media as well as SLIC codes (which normally only the HP factory should have) and managed to install it as if it were an HP laptop and not an Acer? Is this why I get the Acer logo AND the HP logo when they boot up? Just kidding, and this is no laughing matter, cos it's my can o' worms here.

So, how about if I reflash the BIOS (don't know how I will do that) with Acer SLIC key which will match the key on the install media they will send me....I could even explain the whole situation and hope they don't turn around and say, in that case, they can't help me at all, and I have to buy a full retail copy.

The Vista license from my dads old Toshiba is still in the back of my mind as a potential fall back option.

 

[alphanumeric]

That's an old trick. You take a stock BIOS and modify it. It's not easy and not without risk. From what I've read anyway. I've done some research on it in the past, but not for the reasons some would think. I get systems I have to deal with that I suspect are pirated and I have to try and make legal again. Microsoft doesn't give out very much info on how activation works, for very good reasons. So in order to figure out what's up you have to research how it was cheated in the first place and undo it. Not a whole lot of fun. You also have to be very careful what you say on reputable forums like here so as not to get in hot water. Yes, flashing with the latest official BIOS for that laptop will undo it. It may also restore the official Windows 7 SLIC table. If so the recovery media they want you to buy will then work.

 

[alphanumeric]

Unfortunately there are web sites out there that are almost totally devoted to this type of cheat. The tools and files are there to do this stuff. It amazes me that they aren't taken down. I guess its what country hosts them?

 

[torchwood]

we need Noel

The best person to advise on this is Noel, unfortunately at the moment, he's under the weather, he will know exactely if the acer recovery disc will work.

Roy

 

[silverfx]

I may sleep easy tonight alpha, thanks for that ending on positive note. Can I assume that flashing with the latest official BIOS needs to be done as soon as:

• the factory install media has arrived
• I have wiped the drive ready for install

...and that I don't need to be inside Windows to flash the bios? Because I am thinking that as soon as I do so, it may corrupt the current windows installation which thinks it is an HP installation, then when I update the bios, the keys don't match anymore and (HP) windows won't boot up, but that's ok, because I have my Acer recovery disk and, sorry a bit garbled, in essence, will I update the bios from within the current installation or wipe the drive first and do it from the DOS prompt or within the bios itself. Need to hit the hay soon, but trying to get this stuff clear in my head. Thanks guys, you're the bomb.

 

[silverfx]

Look forward to hearing Noel's take on this Roy. Hitting the sack now, talk soon, and thanks

 

[alphanumeric]

Yes, you should be able to flash the BIOS from the BIOS. Just read the instructions at least twice, and print them out if you can. And yes, restoring the official SLIC table will break the current OEM-SLP activation. The certificate won't match the SLIC table anymore.

 

[alphanumeric]

A second or third opinion won't hurt things in a situation like this.

 

[Layback Bear]

From what I see from the log; someone has installed a H.P. Product I.D. on a Acer laptop.

From the log.

<SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire E1-571</Model

Windows Product ID: 00426-OEM-8992662-00010

That make the installation counterfeit on that computer.

That is the reason for these in the log.

File Scan Data--> File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003] File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003] File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003] File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

The solution is simple.
Buy a proper Windows 7 Microsoft DVD with the proper COA key and Clean Install Windows 7.

You say you bought the laptop in Asia. Asia is a big place and many countries.
From what I can find out the laptop came with Windows 8 which means anybody who installed Windows 7 needed to put the Windows 7 sticker on the laptop and didn't. Counterfeiters don't do the sticker thing.

Windows 7 Ultimate is getting very hard to find from a known legal seller.
Cost about $250.00 for OEM.
Windows 7 Pro $140.00 OEM
Home Premium $100.00 OEM

Slim chance of finding Retail version on any of them.

 

[silverfx]

Thanks for the info, layback.

Asia sure is a big place, I was in Thailand at the time, that's where I bought it. Now you mention Windows 8, it's quite possible that it came with Windows 8 and that I didn't want it and asked the store if I could have Windows 7 instead, and of course, they agreed. Only, I wasn't to know that it would be a counterfeit installation of Win 7, had I known, I would have opted for the genuine Windows 8. I don't even blame them, they were making a sale. Either way, doesn't seem to be a sticker anywhere, though I haven't checked inside the battery case yet. From what I understand, some laptops aren't supplied with stickers anymore so I was wondering if this would be one of them. That would make sense to me in these days of OEM-SLP installations with the automatic activation, where I seldom need to know the product key, if at all, do I?

So if I had paid for the laptop with Windows 8 instead of Windows 7, then I wouldn't be in this situation. I assume that the girl at Acer Support who wanted to supply me the recovery install disk didn't much care that the current installation is Windows 7, but while I think of it, on the Acer drivers download page, you can download drivers for the E1-571 laptop for Windows 7. So, whilst both Layback and Torchwood picked up on the usual Windows 8 installation, I assume I wouldn't be able to download Windows 7 drivers if it never shipped anywhere with Windows 7, unless the Windows 7 drivers are for customers who downgrade.

In any case, at the time, I paid for a laptop which included Windows, and I preferred 7 over 8. The girl at Acer seems glad to sell me the recovery disk. If I update with the latest official BIOS and I can install from the recovery disk, I will be satisfied.

 

[alphanumeric]

Run showkey on it, Solved Showkey - Windows 10 Forums It will tell you if there is a Windows 8/8.1 OEM key or not. As far as I know it is stored in a section of the BIOS that is not affected by a BIOS flash/upgrade. Totally separate from the SLIC table. In fact I do believe you can have an OEM embedded key even if there is no SLIC table. The SLIC table is only required for Windows 7 and earlier. Which may be why you have the counterfeit BIOS. It never had a SLIC table from the factory.

 

[silverfx]

@ alpha

Thanks, I'm on it.

 

[silverfx]

Showkey Report:

Windows Product Key Information

Product Name: Windows 7 Ultimate

Product ID: 00426-OEM-8992662-00010

Installed Key: *****-*****-*****-*****-2C9T3

OEM Key: Windows 7 OEM marker present in firmware


What do you think? Does this mean that some of these laptops 'did' ship with Win 7 (i.e. this one amongst others) or is the 'Windows 7 OEM marker present in firmware' a reference to the HP installation?