Solved Parents' OEM version of Windows 7 suddenly not valid -Help ASAP please

[mamatrauma]

Thanks for any help. I'm visiting my parents (ages 92 & 87!) who use an older HP desktop computer. They need it for word processing and email (AOL) and the basic card games that come with the OS. I'm here for two days only.

They told me that Windows 7 suddenly reported it wasn't valid last week, even though I've set them up for automatic updates when I was here in June and they've been updated regularly. I tried to validate via Microsoft's site legitcheck.hta and they insist it's not a valid license. I ran Magic Jelly Bean Key Finder and pulled up the OEM CD key and tried to validate that way. No go. So I ran MGADiag and here's what it says:

Diagnostic Report (1.9.0019.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
 
Cached Validation Code: 0xc004c4ab
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {F76B9664-7049-4215-99F3-0273DD15A2DE}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
 
WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
 
WGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
 
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
 
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005
 
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
 
File Scan Data-->
 
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{F76B9664-7049-4215-99F3-0273DD15A2DE}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-2358096980-969618840-1165811421</SID><SYSTEM><Manufacturer>HP-Pavilion</Manufacturer><Model>GX770AA-ABA a6319fh</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>5.15 </Version><SMBIOSVersion major="2" minor="5"/><Date>20071231000000.000000+000</Date></BIOS><HWID>CF693E07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>QA09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>563CE91D1BC5732</Val><Hash>okPv6JcPmRqkYm20iEmsrjYamd8=</Hash><Pid>81602-921-0357033-68417</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 
 
Spsys.log Content: 0x80070002
 
Licensing Data-->
Software licensing service version: 6.1.7601.17514
 
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7601.0000-2472014
Installation ID: 011831367195204021375760323510668144464156579770874086
Processor Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88338[/URL]
Machine Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88339[/URL]
Use License URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88341[/URL]
Product Key Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88340[/URL]
Partial Product Key: P4K27
License Status: Notification
Notification Reason: 0xC004F200 (non-genuine).
Remaining Windows rearm count: 4
Trusted time: 9/4/2014 12:46:04 AM
 
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C4AB
HealthStatus: PASS
Event Time Stamp: 9:4:2014 00:45
WAT Activex: Registered
WAT Admin Service: Registered
 
HWID Data-->
HWID Hash Current: LgAAAAEAAAABAAEAAQACAAAAAgABAAEAJJRSMN6NPqU26OJsCMonhbANTAEqhQ==
 
OEM Activation 1.0 Data-->
N/A
 
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
ACPI Table Name    OEMID Value    OEMTableID Value
APIC            HPQOEM        SLIC-CPC
FACP            HPQOEM        SLIC-CPC
HPET            HPQOEM        SLIC-CPC
MCFG            HPQOEM        SLIC-CPC
OEMB            HPQOEM        SLIC-CPC
GSCI            HPQOEM        SLIC-CPC
SLIC            DELL         QA09 
SSDT            HPQOEM        SLIC-CPC

 

[NoelDP]

The installation is counterfeit.
The installed Product Key is from a Dell computer - and ONLY valid on Dell computers originally shipped with Windows 7 installed.
There is an Activation Exploit present in an attempt to bypass activation and validation requirements.
The machine was built 2 years before Windows 7 was released.

You need to reformat and reinstall the original OS - probably Vista Home Premium - using either retail media in conjunction with the COA sticker Product Key, or the manufacturer's Recovery media.

 

[mamatrauma]

Thanks NoelDP. Can you explain how that might have happened in the past two months? My folks say the computer hasn't left the house. Some building maintenance guy who used to work here came and "helped" fix their computer while I was out of town. They don't have his number and don't know what he did but it had crashed and he offered to give them a hand. My dad said he got a blue screen with a lot of type that was too small to read. guessing it was the blue screen of death.

 

[NoelDP]

It sounds like the guy 'upgraded' the system with a bootleg copy of Windows to 'fix' it - and installed the Activation Exploit to hide the fact. (All too common a scenario )

A recent Windows Update may have broken the Exploit - or it was never properly installed - and the system went into re-activation mode. 30 days later, the grace period expired, and the system went into notification mode, and Reduced Functionality (black screen, security updates only, etc.)

If you don't have the Recovery partition remaining on the machine, or the disks the system prompted you to create when first installed, you should be able to order a set of disks from HP. Don't forget to back up the data to external media first!

The other option is to purchase a Full License for Windows 7 Ultimate (If you can find one!) and swap the Key into the existing install - but there are drawbacks...
1) The Activation Exploit may have come with other hangers-on in the form of rootkits, etc.
2) the Activation exploit is known to reduce the stability of the OS - and may result in BSOD's
3) The only Full licenses available from reputable sources nowadays are likely to be OEM ones - which cannot be transferred to a new machine if/when this one dies (even if 10 minutes after activation).

The above is why we always recommend a reformat and reinstall in these circumstances.

 

[mamatrauma]

Wow, NoelDP! Thank you for answering my follow-up and the next three yet-to-be asked questions!!! I guess that since my visit ends tomorrow, and I don't have enough time to fix this properly now, I have two options left for today. Buy them a new desktop computer and transfer the docs they have on this one to it OR leave it until my next visit when I can follow your steps above. What happens if I leave it be until I return? Will their computer shut down eventually?

 

[NoelDP]

It shouldn't do (barring other factors) - WIndows 7 is very lenient compared to earlier versions in its Reduced Functionality Mode, and it will still function as it is now pretty much indefinitely.

 

[mamatrauma]

Thank you so very much!