Solved Win 7 activation N/A. slui.exe Access Denied. Genuine? MGA inside

[win2curious]

Bought a Lenovo T61 laptop with Win 7 Pro from craiglist.
Windows Updates, Internet etc. works fine.
Didn't get any 'Copy may not be genuine, victim of counterfeting' popup.
But the Activation section under System Properties is missing.
When I tried running slui.exe, it says Access Denied, even though the file is there in system32.
I tried switching to Hidden admin account, no use.

MGA:

Diagnostic Report (1.9.0019.0): 
----------------------------------------- 
WGA Data--> 
Validation Status: Genuine 
Validation Code: 0 
 
Cached Validation Code: N/A, hr = 0xc004f012 
Windows Product Key: *****-*****-MV8MH-98QJM-24367 
Windows Product Key Hash: wgci5Gdejx4esg7++zTOe3LWF+4= 
Windows Product ID: 00371-OEM-8992671-00437 
Windows Product ID Type: 2 
Windows License Type: OEM SLP 
Windows OS version: 6.1.7601.2.00010100.1.0.048 
ID: {9295C61D-A62C-4558-A7C4-06402A0D38AA}(3) 
Is Admin: Yes 
TestCab: 0x0 
WGA Version: N/A, hr = 0x80070002 
Signed By: N/A, hr = 0x80070002 
Product Name: Windows 7 Professional 
Architecture: 0x00000000 
Build lab: 7601.win7sp1_gdr.130505-1534 
TTS Error:  
Validation Diagnostic:  
Resolution Status: N/A 
 
WgaER Data--> 
ThreatID(s): N/A, hr = 0x80070002 
Version: N/A, hr = 0x80070002 
 
WGA Notifications Data--> 
Cached Result: N/A, hr = 0x80070002 
File Exists: No 
Version: N/A, hr = 0x80070002 
WgaTray.exe Signed By: N/A, hr = 0x80070002 
WgaLogon.dll Signed By: N/A, hr = 0x80070002 
 
OGA Notifications Data--> 
Cached Result: N/A, hr = 0x80070002 
Version: N/A, hr = 0x80070002 
OGAExec.exe Signed By: N/A, hr = 0x80070002 
OGAAddin.dll Signed By: N/A, hr = 0x80070002 
 
OGA Data--> 
Office Status: 109 N/A 
OGA Version: N/A, 0x80070002 
Signed By: N/A, hr = 0x80070002 
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 
 
Browser Data--> 
Proxy settings: N/A 
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) 
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe 
Download signed ActiveX controls: Prompt 
Download unsigned ActiveX controls: Disabled 
Run ActiveX controls and plug-ins: Allowed 
Initialize and script ActiveX controls not marked as safe: Disabled 
Allow scripting of Internet Explorer Webbrowser control: Disabled 
Active scripting: Allowed 
Script ActiveX controls marked as safe for scripting: Allowed 
 
File Scan Data--> 
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385] 
 
Other data--> 
Office Details: <GenuineResults><MachineData><UGUID>{9295C61D-A62C-4558-A7C4-06402A0D38AA}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-24367</PKey><PID>00371-OEM-8992671-00437</PID><PIDType>2</PIDType><SID>S-1-5-21-4281886315-328512593-282661049</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>7664A19</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7LETB2WW (2.12 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20080220000000.000000+000</Date></BIOS><HWID>4A223D07018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7L   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>   
 
Spsys.log Content: 0x80070002 
 
Licensing Data--> 
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs". 
 
Windows Activation Technologies--> 
HrOffline: 0x80070005 
HrOnline: 0x00000000 
HealthStatus: N/A 
Event Time Stamp: 7:13:2013 19:15 
WAT Activex: Registered 
WAT Admin Service: Not Registered - 0x80070005 
 
HWID Data--> 
HWID Hash Current: OAAAAAEABwABAAEAAAABAAAAAgABAAEAJJRKdpdjLggALRqfgIVGg7BUBgw4V1jQbLXMsuBQRso= 
 
OEM Activation 1.0 Data--> 
N/A 
 
OEM Activation 2.0 Data--> 
BIOS valid for OA 2.0: yes 
Windows marker version: 0x0 
OEMID and OEMTableID Consistent: yes 
BIOS Information:  
  ACPI Table Name    OEMID Value    OEMTableID Value 
  APIC            LENOVO        TP-7L    
  FACP            LENOVO        TP-7L    
  HPET            LENOVO        TP-7L    
  BOOT            LENOVO        TP-7L    
  MCFG            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L    
  ECDT            LENOVO        TP-7L    
  TCPA            LENOVO        TP-7L    
  SLIC            LENOVO        TP-7L    
  ASF!            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L    
  SSDT            LENOVO        TP-7L

 

[dwarfer66]

I think you have a definite cracked copy, I think from what I have seen it has had Remove WAT used on it (remove windows activation tech). Would not recommend bying from places like that. Sorry for your probs.

 

[win2curious]

awhh..
I actually bought 2 laptops from the guy - T60 & T61. On T60, I was able to install Security Essentials fine.

But on this T61, it didn't install, saying 'could not validate genuine Windows'.
Only then I realized both machines didn't have the 'Activation section' under System Properties.

How long will Windows work until it starts to give that Counterfeit popup ?

Also, why does Windows Update work on cracked copies ?? I assumed that was the test for genuinity !

 

[Diosoth]

Also, why does Windows Update work on cracked copies ?? I assumed that was the test for genuinity !

Microsoft tried to kill support for that back with Windows XP but they caught a lot of bad press for it. Unpatched systems can be a breeding ground for malware to spread. Forcing pirated users to go unpatched could be a further security and malware risk to the internet and other Windows users.

 

[Golden]

This is definitely counterfeit.

Diagnostic Report (1.9.0019.0): 
----------------------------------------- 
WGA Data--> 
Validation Status: [COLOR="Red"]Genuine[/COLOR] 
Validation Code: 0

MGA does not report "Genuine" in the Validation status, but more importantly, this computer is far too old to be running an OEM installation.

Windows License Type: OEM SLP
<Date>[COLOR="red"]2008[/COLOR]0220000000.000000+000</Date>

Purchase a retail copy of Windows 7, then format and reinstall from fresh.

 

[dwarfer66]

I thought it was, I have seen it on other comps.

 

[win2curious]

MGA does not report "Genuine" in the Validation status

HUH ! I just ran the tool on another xp machine with a key that matches COA, and it said 'Genuine' in green font. Is that fake too ?!

 

[Golden]

I just realised you are running an older version of MGADIAG (perhaps the older version did indeed use the word "Genuine"....I cant remember).

For posterity, you can run the current version of MGADIAG using the instructions below, but the fact remains your BIOS date is too early for an OEM so the installation remains counterfeit.

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click Copy - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the tool here in your next reply

 

[win2curious]

Done, and attached 2 files.
MGAdiag version 1.9.0027.0

win7_bad_mga.txt - is this counterfeit ?
winxp_good_mga.txt - is this legit ?

 

[Golden]

Windows 7 is counterfeit.....evidence of RemoveWAT installled and date of computer predates Windows 7 OEM release

Not sure about XP.....I'll ask Noel to have a look

 

[NoelDP]

The XP one is interesting.
The Key appears to be an OEM System Builder one - but there is an OEMBIOS.DAT file present, which doesn't normally exist in such cases.
Is there a COA sticker on the case? if so, for what version and edition of Windows is it valid? Does it look right?

 

[win2curious]

Yes, It has COA sticker

Windows XP Professional
Lenovo Singapore
29R7077
00045-696-985-285
X12-51822
Product key : *-WV7FD

When I bought the (used) laptop, and checked Product Key in OS, it didn't match COA.

Then I ran Windows XP Product Key update tool ( http://go.microsoft.com/fwlink/?LinkId=50346 ), and entered COA sticker key and it activated fine.

 

[win2curious]

1. is the XP genuine?

2. i'm looking to buy Win 7 Pro, and found this ad on craiglist, claiming 'Unlimited installs. Vendors Copy. Microsoft Authorized Dealer. for $50' ( image link ) - is it legit ?

 

[DocBrown]

In five years of win7 I don't ever remember seeing a Vendors copy with unlimited installs

??????????????????????????????????????? Buyer be very BeWare!!!!

 

[NoelDP]

Yes, It has COA sticker

Windows XP Professional
Lenovo Singapore
29R7077
00045-696-985-285
X12-51822
Product key : *-WV7FD

When I bought the (used) laptop, and checked Product Key in OS, it didn't match COA.

Then I ran Windows XP Product Key update tool ( http://go.microsoft.com/fwlink/?LinkId=50346 ), and entered COA sticker key and it activated fine.

Yes, it's genuine

 

[NoelDP]

,,,but that site is as bogus as a £9 note!

Please do NOT fall for it - you will regret it sooner or later.

 

[win2curious]

OK, yeah, I had doubts. I just flagged the craigslist ad. here is the link if you want to flag / report it - [removed]

 

[win2curious]

cracked copy?

Here is my exchange with that dealer, trying to get him to spill :

----
Me - Hi. Saw your craigslist ad. I want to buy the Windows 7 CD. Have a question - Are you Microsoft Registered Refurbished, or Microsoft Authorized Refurbisher ?

Him - Neither...I have a vendors copy

Me - Vendor means OEM like Dell, HP?

Him - Yes...I have copies and they're able to be installed multiple times.

Me - So I can install it on multiple computers? or multiple times on same computer ?

Him - Both

Me - i mean, Microsoft won't be able to find out that I'm installing on several computers, right ?

Him - Nope I have it patched in a way that it automatically updates behind the scenes and ia activated permanently with activators I provide.

Me - so Windows Updates, Genuine Advantage etc. will not know that it is cracked copy, correct? I don't want the key to get deactivated after a month or so

Him - No no no...it's not that type of copy. Once you've activated it with the activators I provide, it'll never give you that type of issue.

Me - what is an activator ? is it a program .exe, or the 25 serial key ?

Him - It activates the software. I've been doing this for a long time now so you will be just fine. I understand your skepticism but you will have to see it to believe it.

Me - yeah i had some bad experiences on cragislist b4 where the machine doesn't let u install some stuff cos it's not genuine

Him - I totally understand... you got to go with your instincts.

--More--

Me - Have some questions - How / where will it buy it from u ? Are u a business (cos ad says Authorized Dealer) ? U have an email address? CD or download ?

Him - I could meet you. I have connections with MS ppl that provide legit software. I conduct business face to face. I usually install software for clienta so they would see the ease of use. I do provide a cd for my clients to have for future installs.
----

Not legit, right ?
also What's an activator?

 

[derekimo]

No it's not legit, forget about any of those too good to be true opportunities.

 

[win2curious]

Got it !

I just filed a piracy report here : https://www.microsoft.com/en-us/howtotell/cfr/report.aspx

This forum is Very Helpful. You guys rock !