Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Search Search
Search for:
Tech Support Guy > > >

Windows not genuine, but it is not malware


(!)

JDukeE's Avatar
JDukeE JDukeE is offline
Member with 1 posts.
THREAD STARTER
 
Join Date: Jan 2013
31-Jan-2013, 11:36 AM #1
Windows not genuine, but it is not malware
So, my son'sWin7 Toshiba laptop is getting a black background, "windows is not genuine" message. It shuts down without warning every so often too. I ran Malwarebytes to see if it was a virus, but got zero hits so I suspect it is not anything malicious.

His hard drive fried a few months ago and we put in a new one. The guy who put it in said the copy of windows that was installed was genuine and it worked fine for a month or so until this issue cropped up.

I have run MGADiag and here are the results:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 50
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-WQVFF-9C4H2-XCBPB
Windows Product Key Hash: YGX8RnKR0E4ZgzVdj564Qse8y20=
Windows Product ID: 00426-292-9551341-85387
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {3479BFDB-D5D3-4F62-9CD3-F797EA0F1A20}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{3479BFDB-D5D3-4F62-9CD3-F797EA0F1A20}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-XCBPB</PKey><PID>00426-292-9551341-85387</PID><PIDType>5</PIDType><SID>S-1-5-21-534200625-2753438681-4235806895</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite L740</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>2.10</Version><SMBIOSVersion major="2" minor="7"/><Date>20111031000000.000000+000</Date></BIOS><HWID>A5233907018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSQCI</OEMID><OEMTableID>TOSQCI00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>87CBC9474F42714</Val><Hash>K0A0lsIGlTauHAr+msQ2eC8BvUg=</Hash><Pid>81599-906-3760426-65916</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00170-292-955134-00-1033-7601.0000-3092012
Installation ID: 005556541941306542676235658911307831669032683234000391
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: XCBPB
License Status: Notification
Notification Reason: 0xC004F009 (grace time expired).
Remaining Windows rearm count: 3
Trusted time: 1/31/2013 10:27:04 AM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:5:2012 22:20
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEAAgABAAEAAAABAAAAAgABAAEAonb+IeTLKK1sPuwZ6L3QZCa7TLQucw==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC TOSQCI TOSQCI00
FACP TOSQCI TOSQCI00
HPET TOSQCI TOSQCI00
BOOT TOSQCI TOSQCI00
MCFG TOSQCI TOSQCI00
WDAT TOSQCI TOSQCI00
ASF! TOSQCI TOSQCI00
SLIC TOSQCI TOSQCI00
SSDT INSYDE INSYDE
ASPT TOSQCI TOSQCI00
SSDT INSYDE INSYDE
SSDT INSYDE INSYDE
TerryNet's Avatar
Computer Specs
Moderator with 66,475 posts.
 
Join Date: Mar 2005
Location: Ottawa, IL
31-Jan-2013, 01:52 PM #2
Quote:
Notification Reason: 0xC004F009 (grace time expired).
Maybe it just wasn't activated?

Since it's a retail Windows 7 Ultimate you were charged about $300 for it and received the installation DVDs, right?

If you cannot activate it or you begin to smell something fishy this Are you protected? site will be of interest.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑