windows not activated after every sleep

[paulos]

hi, i have an issue in my windows 7 pro x64 system and i would be glad if someone can help me to solve it.
The problem i noticed yesterday is that when i woke up my pc from sleep a message appeared in the right down corner of desktop saying "windows 7 build 7601 this copy of windows is not genuine".I have this pc for 5 months and never had this after a sleep. I noticed as well something else: everytime i put my windows into sleep mode when it wakes up i right click at computer-->properties and i see that the windows is not activated and i have to activate it and sometimes appears as well the message "windows 7 build 7601 this copy of windows is not genuine", when i restart i see that windows is activated.This happens now everytime when the pc goes to sleep and wakes up. I have a little suspicion that is a virus but norton, malwarebytes, norton power eraser and tdsskiller say that is clean. Finally i ran the mgadiag tool and the results are these:
thanks for any idea

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-788W3-H689G-6P6GT
Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
Windows Product ID: 00371-OEM-8992671-00008
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {C5BCCD2E-3A6A-4CCD-AE64-06C08EE8AA05}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150427-0707
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C5BCCD2E-3A6A-4CCD-AE64-06C08EE8AA05}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6P6GT</PKey><PID>00371-OEM-8992671-00008</PID><PIDType>2</PIDType><SID>S-1-5-21-580412193-3220798139-819672977</SID><SYSTEM><Manufacturer>ASUS</Manufacturer><Model>All Series</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>2105</Version><SMBIOSVersion major="2" minor="7"/><Date>20140808000000.000000+000</Date></BIOS><HWID>F1983407018400F4</HWID><UserLCID>0408</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GTB Standard Time(GMT+02:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00178-926-700008-02-1033-7600.0000-0052015
Installation ID: 015022983872593246501845462876909293018805529325968355
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 6P6GT
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 9/6/2015 8:55:57 μμ

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C533
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:14:2015 18:51
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEA6GEy+9Cc2rK2dNY5kB5wnMj2

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            ALASKA        A M I
  FACP            ALASKA        A M I
  HPET            ALASKA        A M I
  MCFG            ALASKA        A M I
  FPDT            ALASKA        A M I
  LPIT            ALASKA        A M I
  SSDT            PmRef        Cpu0Ist
  SSDT            PmRef        Cpu0Ist
  SSDT            PmRef        Cpu0Ist
  SSDT            PmRef        Cpu0Ist
  BGRT            ALASKA        A M I
  SLIC            ACRSYS        ACRPRDCT

 

[NoelDP]

That would probably be because the installation is counterfeit!
You have an ACER SLIC table showing in the BIOS - but it's an ASUS motherboard - and you're using a Hewlett-Packard Product Key.
You need to reformat and reinstall using genuine media and Key.

 

[paulos]

Thank you for the response and most likely this is the reason why this is happening, thanks!! I didn't understand the part: acer slic table etc...What does this mean exactly? How can be that missmatch and how can somebody do that? is windows 7 fault or the drivers?can you explain? I' m asking about the acer slic etc not about Hewlett-Packard Product Key because that is obvious.This means that i have in my pc hacked windows 7 as these from torrents? I'm asking all these because the installation was performed by the store that i bought the parts of my pc. I didn't pay for the os for some reason but i thought that the os was a general oem maybe license and of course legitimate.

 

[NoelDP]

OEM SLP: This is the key that came in Windows (from the factory). It works by connecting to a BIOS flag (the SLIC table) found only on computers from that Manufacturer. It also checks for the existence of proper matching licenses in the OS itself. Once it sees both, it self-activates every time the machine is rebooted.

When, as in your case, there is a hacker's Activation Exploit installed, it's designed to fool Windows into seeing a SLIC table that isn't really there (although there are ways to create 'real' ones). Some are more effective at hiding themselves than others, and it all depends on the settings chosen when installing the Exploit as to whether it's easy to spot or not.
In your case it was obvious from the moment I saw the first and last sections of the report - I just looked at the third section for confirmation.

Since you say you didn't pay for the OS, when a OEM System Builder license alone (as a singleton license) costs around $150 - what did you think you were getting? What BS did the shop spin at you? How much did they charge for building the machine?
No-one spends the time installing an OS without charging for it, and for the OS itself. I'd check the online prices for the parts installed (heck, I'd check that the parts installed are the parts you actually paid for!), and see what the difference is between that and the built price - that's how much you paid for his time, which probably amounts to no more than 2 hours. ... and if he has discounts with his suppliers it's going to be more than that (possibly a lot more!)

 

[paulos]

Look, maybe i'm not a computer expert but i'm not a fool. I purchased all computer parts in good prices and the installation of the os.The only thing i didn't pay was the os itself because i had a windows xp product key (which have expired) and when i took the machine there were windows 7. Ι assumed by mistake that a serious and known shop maybe had a mass general license so installed the os. But the technician never told me that was counterfeit and i didn't even expect that thing from that shop... Anyway the last thing i want to know if this is 100% hacked, counterfeit windows 7 and there isn't any possibility to be genuine.
Thank you sir

 

[NoelDP]

The only way to make this system genuine is to reinstall with genuine media and Key.
At present, you have no idea what else may have got installed along with the hack - which is itself a form of rootkit - that may be lowering your security threshholds.