[SOLVED] Suddenly "This copy of Windows is not genuine"

[16bwhitt]

Is there an anti virus on it?

There is a certain application out there for validating WIndows that AVG detects are removes. Might have just happened.

 

[LABFE]

Glad to help, Hope I wasn't too rough on you.

Eh, I do sort of a broad array of IT services with computer repair being one area. So unfortunately I learn a lot on the fly. I've tried to get at least a part time position with a computer repair shop to become more proficient in this area, but no such luck. I don't mind if you put it strongly worded; it gets the point across. Moving forward the customer decided to replace the PC due to it's age as opposed to putting more money into the old one.

 

[LABFE]

Is there an anti virus on it?

There is a certain application out there for validating WIndows that AVG detects are removes. Might have just happened.

Just Security Essentials.

 

[Porthos]

Is there an anti virus on it?

There is a certain application out there for validating WIndows that AVG detects are removes. Might have just happened.

Weather that happened or not, It is bootleg and the ONLY way to fix it is to sell the client a copy of windows OR sell him another computer with a LEGAL copy of windows.

In my residential experience NO ONE has EVER sprang for a legal copy of windows. ALWAYS goes for the newer refurb and data transfer. Or they leave and go find someone who will pirate it for them again.

 

[16bwhitt]

Weather that happened or not, It is bootleg and the ONLY way to fix it is to sell the client a copy of windows OR sell him another computer with a LEGAL copy of windows.

In my residential experience NO ONE has EVER sprang for a legal copy of windows. ALWAYS goes for the newer refurb and data transfer. Or they leave and go find someone who will pirate it for them again.

I am fully aware, I always purchase a genuine copy for all reloads. However, I was just trying to get to the root of the problem of why it suddenly started stating not genuine.

 

[Porthos]

Moving forward the customer decided to replace the PC due to it's age as opposed to putting more money into the old one.

Yup, Happens all the time. Wait till he finds out you cant GIVE him MS OFFICE for free.

 

[Porthos]

I always purchase a genuine copy for all reloads.

Where are you getting Genuine Win 7 RETAIL disks from? I am sure we would all like to know.

 

[phaZed]

@Porthos, your likely 90% correct on this instance, however, viruses DO and CAN disable WGA while leaving Genuine Advantage checks in the passing green. Trojan.fakeavalert and others have been known to kill key authorization in order to stop Windows Updates for their own nefarious purposes.

 

[Porthos]

@Porthos, your likely 90% correct on this instance, however, viruses DO and CAN disable WGA while leaving Genuine Advantage checks in the passing green. Trojan.fakeavalert and others have been known to kill key authorization in order to stop Windows Updates for their own nefarious purposes.

There is NO way on a RESIDENTIAL HOME computer is running a KMS copy legally.
There is no 90% in this specific case.

But in NON KMS cases you are correct.

 

[phaZed]

There is NO way on a RESIDENTIAL HOME computer is running a KMS copy legally.
There is no 90% in this specific case.

I agree, but but but...

That's exactly what the virus would do.. change the key to a KMS key because that can be easily scripted with a KMS Server running locally on the infected machine. Once the machine gets a KMS key the machine then the KMS server is used to publish a SRV record to DNS which can essentially be a call-back to the hacker's C&C server and you are OwNeD.

There is that chance. I have seen it before just like the OP has stated on OEM customer machines with fully valid COA's on the bottom. IIRC this was a 2009'ish type of problem that persisted for a few years and fell out of practice.

 

[Porthos]

I agree, but but but...

That's exactly what the virus would do.. change the key to a KMS key because that can be easily scripted with a KMS Server running locally on the infected machine. Once the machine gets a KMS key the machine then the KMS server is used to publish a SRV record to DNS which can essentially be a call-back to the hacker's C&C server and you are OwNeD.

There is that chance. I have seen it before just like the OP has stated on OEM customer machines with fully valid COA's on the bottom. IIRC this was a 2009'ish type of problem that persisted for a few years and fell out of practice.

I will digress I did not know of that hack.

 

[glennd]

I had one in a week or two ago that had pirated windows on it, fully activated until he tried to do the windows 10 upgrade then it suddenly became deactivated.

 

[GTP]

Are you saying it is indeed bootleg? Any idea why it worked this long and now suddenly this.

I cant remember the name now but there was a "registry hack" and a small "activation reset utility" that unscrupulous techs used.
Microsoft have had several little "hunters" running on the internet for many years seeking out this tool and others as well as bootlegged versions of Winblows.
They have been found and caught with a bootleg copy and it has been disabled!

 

[GTP]

pirated windows on it

If I discover anything like this I simply tell my client "get legal or get out!" 99% get legal!
I will not touch "non genuine" and that goes for hacked or cracked software that is installed on client computers!

 

[Porthos]

If I discover anything like this I simply tell my client "get legal or get out!" 99% get legal!
I will not touch "non genuine" and that goes for hacked or cracked software that is installed on client computers!

If it as simple as a shop/tech installed Ultimate and there is a Home COA then my customers agree to get legal. If it has NO COA (custom build) or XP/Vista COA no one wants to pay the price for a legal copy. Those usually agree to a refurb and data transfer. The rest I show them the door as well.

 

[GTP]

then my customers agree to get legal

I'm always surprised at the amount of people that show genuine shock that they are not legal! They rely on people to do the job and don't really understand what they get or what was done.
Like I said, 99% agree to get legal after it's explained to them!

 

[Porthos]

Like I said, 99% agree to get legal after it's explained to them!

For me they will only if the cost to get legal is less than a replacement with data transfer.

 

[Porthos]

I'm always surprised at the amount of people that show genuine shock that they are not legal! They rely on people to do the job and don't really understand what they get or what was done.

When something is done to their machine ALL they care about is if it works. Just like the shop that all the used computers they sell have Ultimate and office on them.

 

[Diggs]

Where are you getting Genuine Win 7 RETAIL disks from? I am sure we would all like to know.

Really? I know most look down on Ebay, but it's about the only place left to get retail copies of Win7. I use the vendor "thesellingpost" and have never had a problem with any of the Win7 versions I get from them. All activate online instantly and the few that needed upgraded to Win10.

http://www.ebay.com/itm/Microsoft-W...370130?hash=item5677d0f412:g:F8wAAOSw7ThUkKtX

 

[Moltuae]

Really? I know most look down on Ebay, but it's about the only place left to get retail copies of Win7. I use the vendor "thesellingpost" and have never had a problem with any of the Win7 versions I get from them. All activate online instantly and the few that needed upgraded to Win10.

http://www.ebay.com/itm/Microsoft-W...370130?hash=item5677d0f412:g:F8wAAOSw7ThUkKtX

That looks like a Refurbisher disk, judging by the images, not retail.