Windows Update not working (Current Error: 80070246)

We are teaming against you.
You'll crack eventually and give up.

Code:
BugCheck D1, {[COLOR="#FF0000"]fffff881039bfad8[/COLOR], [COLOR="#800080"]2[/COLOR], [COLOR="#00FFFF"]1[/COLOR], [COLOR="#008000"]fffff8800165ea35[/COLOR]}

So here we've got memory being referenced (written to) at an IRQL of 2 which is either paged out or simply invalid.

Code:
fffff880`081983a8 fffff800`0328aca9 : 00000000`0000000a fffff881`039bfad8 00000000`00000002 00000000`00000001 : [COLOR="#0000FF"]nt!KeBugCheckEx[/COLOR]
fffff880`081983b0 fffff800`03289920 : 00000000`00000001 fffffa80`100688f0 fffffa80`1603e100 fffffa80`1210e100 : [COLOR="#0000FF"]nt!KiBugCheckDispatch+0x69[/COLOR]
fffff880`081984f0 fffff880`0165ea35 : fffffa80`117554f0 00000000`00000001 00000000`00000001 fffffa80`11755420 : [COLOR="#0000FF"]nt!KiPageFault+0x260[/COLOR]
fffff880`08198680 fffff880`0166da0d : 00000000`4f68aa06 00000000`00000018 00000000`00000002 80000002`00000000 : [COLOR="#800080"]tcpip!TcpTcbHeaderSend+0x1f5[/COLOR]
fffff880`08198830 fffff880`0167a334 : fffffa80`0eb57500 00000000`00000002 fffffa80`0de55060 00000000`00000000 : [COLOR="#800080"]tcpip!TcpTcbCarefulDatagram+0xc9d[/COLOR]
fffff880`081989e0 fffff880`0167e86a : fffffa80`0d9eff00 fffffa80`0cb33700 fffffa80`0d86ee01 00000000`00000000 : [COLOR="#800080"]tcpip!TcpTcbReceive+0x694[/COLOR]
fffff880`08198b90 fffff880`0167e3b7 : fffff880`044917e2 fffffa80`0d9eb000 00000000`00000000 fffff880`01661600 : [COLOR="#800080"]tcpip!TcpMatchReceive+0x1fa[/COLOR]
fffff880`08198ce0 fffff880`016606c7 : fffffa80`0d9eba40 fffffa80`0d8569c7 fffffa80`0d9eba40 00000000`00000000 : [COLOR="#800080"]tcpip!TcpPreValidatedReceive+0x177[/COLOR]
fffff880`08198d90 fffff880`01660799 : fffff880`08198f10 fffff880`0176e9a0 fffff880`08198f20 00000000`00000001 : [COLOR="#800080"]tcpip!IppDeliverListToProtocol+0x97[/COLOR]
fffff880`08198e50 fffff880`01660c90 : fffffa80`0d9eb000 fffffa80`0eb57400 00000000`00000011 fffff880`08198f10 : [COLOR="#800080"]tcpip!IppProcessDeliverList+0x59[/COLOR]
fffff880`08198ec0 fffff880`0165fb21 : 00000000`faffffef fffffa80`0d9eb000 fffff880`0176e9a0 00000000`0eb8c801 : [COLOR="#800080"]tcpip!IppReceiveHeaderBatch+0x231[/COLOR]
fffff880`08198fa0 fffff880`0165e592 : fffffa80`0ebc97e0 00000000`00000000 fffffa80`0eb8c801 00000000`00000001 : [COLOR="#800080"]tcpip!IpFlcReceivePackets+0x651[/COLOR]
fffff880`081991a0 fffff880`01677e5a : fffffa80`0eb8c810 fffff880`081992d0 fffffa80`0eb8c810 00000000`00000000 : [COLOR="#800080"]tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2[/COLOR]
fffff880`08199280 fffff800`0329ae5a : fffffa80`0eb4f030 fffff880`08194000 00000000`00004800 00000000`00000000 : [COLOR="#800080"]tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda[/COLOR]
fffff880`081992d0 fffff880`01677882 : fffff880`01677d80 fffff880`081993e0 00000000`00000002 00000000`00000000 : [COLOR="#800080"]nt!KeExpandKernelStackAndCalloutEx+0xda[/COLOR]
fffff880`081993b0 fffff880`015600eb : fffffa80`0eb8e560 00000000`00000000 fffffa80`0e6d71a0 fffffa80`0e88c000 : [COLOR="#800080"]tcpip!FlReceiveNetBufferListChain+0xb2[/COLOR]
fffff880`08199420 fffff880`01529fc6 : fffffa80`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : [COLOR="#00FFFF"]ndis!ndisMIndicateNetBufferListsToOpen+0xdb[/COLOR]
fffff880`08199490 fffff880`014a3ef1 : fffffa80`0e6d71a0 fffffa80`0cc8cd30 00000000`00000001 00000000`00003402 : [COLOR="#00FFFF"]ndis!ndisMDispatchReceiveNetBufferLists+0x1d6[/COLOR]
fffff880`08199910 fffff880`03e7596b : fffffa80`0eab9000 fffffa80`0eafb5f0 fffffa80`0eab9600 00000000`00000000 : [COLOR="#00FFFF"]ndis!NdisMIndicateReceiveNetBufferLists+0xc1[/COLOR]
fffff880`08199960 fffff880`03e65165 : fffffa80`0e6d7100 fffff880`02f64101 fffffa80`0000000a fffff880`08199ba0 : [COLOR="#FF0000"]Rt64win7+0x1596b[/COLOR]
fffff880`08199b40 fffff880`0152ee4b : fffff880`00000000 fffffa80`0e6d71a0 00000000`00000000 00000000`00000000 : [COLOR="#FF0000"]Rt64win7+0x5165[/COLOR]
fffff880`08199ba0 fffff880`014b4bfd : fffffa80`0eb895b8 00000000`0000000a 00000000`00000002 00000000`00000002 : [COLOR="#00FFFF"]ndis! ?? ::DKGKHJNI::`string'+0x1597[/COLOR]
fffff880`08199c10 fffff880`014dbb0c : 00000000`00000000 fffffa80`0eb895b8 00000000`00000080 fffffa80`0d84f230 : [COLOR="#00FFFF"]ndis!ndisQueuedMiniportDpcWorkItem+0xcd[/COLOR]
fffff880`08199cb0 fffff800`0352e7c6 : 00000000`00000000 fffffa80`11e86b60 00000000`00000080 00000000`00000000 : [COLOR="#00FFFF"]ndis!ndisReceiveWorkerThread+0x12c[/COLOR]
fffff880`08199d40 fffff800`03269c26 : fffff880`02f64180 fffffa80`11e86b60 fffff880`02f6efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`08199d80 00000000`00000000 : fffff880`0819a000 fffff880`08194000 fffff880`08199a00 00000000`00000000 : nt!KiStartSystemThread+0x16

So here we can see your realtek network driver calling lots of routines, networking isn't my strong area but I'm reading more into it.
It appears to Network Driver Interface Specification is recieving data and passing it up to TCP/IP which has then tried to access invalid memory.
I believe it's going back up the stack seen as it's receiving information.

Code:
2: kd> [COLOR="#008000"]!address fffff8800165ea35[/COLOR]
Mapping user range ...
Mapping system range ...
Mapping non addressable range ...
Mapping page tables...
Mapping hyperspace...
Mapping HAL reserved range...
Mapping User Probe Area...
Mapping system shared page...
Mapping system cache working set...
Mapping loader mappings...
Mapping system PTEs...
Mapping system paged pool...
Mapping session space...
Mapping dynamic system space...
Mapping PFN database...
Mapping non paged pool...
Mapping VAD regions...
Mapping module regions...
Mapping process, thread, and stack regions...
Mapping system cache regions...


Usage:                  Module
Base Address:           fffff880`01603000
End Address:            fffff880`01800000
Region Size:            00000000`001fd000
VA Type:                SystemPTEs
Module name:            [COLOR="#800080"]tcpip.sys[/COLOR]
Module path:            [[COLOR="#800080"]\SystemRoot\System32\drivers\tcpip.sys[/COLOR]]

We can confirm that was referencing memory that caused the page fault.

Code:
2: kd> [COLOR="#008000"]!pte fffff881039bfad8[/COLOR]
                                           VA fffff881039bfad8
PXE at FFFFF6FB7DBEDF88    PPE at FFFFF6FB7DBF1020    PDE at FFFFF6FB7E2040E0    PTE at FFFFF6FC4081CDF8
contains 000000040CD04863  contains 0000000000000000
pfn 40cd04    ---DA--KWEV  [B][COLOR="#FF0000"]not valid[/COLOR][/B]

Here we can see that the memory which was being referenced was actually invalid so whether or not the IRQL was above 2 the system would still result in a page fault, the page fault handler wouldn't be able to bring the pages into memory as they didn't exist. A 0x50 bugcheck would probably be initiated.

Code:
2: kd> [COLOR="#008000"]lm vm rt64win7[/COLOR]
start             end                 module name
fffff880`03e60000 fffff880`03ec7000   Rt64win7   (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        [COLOR="#FF0000"]Fri Jan 21 07:34:00 [B]2011[/B][/COLOR] (4D3936E8)
    CheckSum:         00065268
    ImageSize:        00067000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

You'll need to update your Realtek network driver, because I don't have your system information file I cannot tell you which to download.

If you know which NIC you're using then update it on the realtek website or via device manager.
 
So, by 7/30/2014, when I managed to do most of the updates, among them were this one: "Realtek - Network - Realtek PCIe GBE Family Controller". Is it the one you may be referring to?

What I previously noticed is that as long as I didn't open the utorrent, the PC would run butter smooth, but as soon as the program was opened, all hell would break loose, it could be instantly or after a while. However, I didn't face a bsod while the program was shutdown. Could it be a coincidence? The same does not apply since the batch of upgrades I mentioned.

[quick edit] What is NIC? I'm dumb. How am I supposed to find out what is my Network Driver?
 
Hi,

I would imagine the update you received for your Realtek card would have solved your BSODs from the look of Jared's analysis. A NIC is a Network Interface Card :) The fact it crashed whilst using UTorrent makes sense, because UTorrent causes heavy network traffic.

Now, back to Windows Update :) There shouldn't be much more to go now! Let's check when SFCFix has to say about things:

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the attached file, SFCFix.txt, and save this to your Desktop. Ensure that this file is named SFCFix.txt - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.txt.
  5. Drag the file SFCFix.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.


https://www.dropbox.com/s/mibdsf2np5142qv/SFCFix.txt?dl=1

SFC Scan


  1. Click on the Start
    Start%20Orb.jpg
    button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt

  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.


Stephen
 
I've been out all day so I couldn't reply.
Stephen got the answer dead right.

As long as you aren't getting any more BSODs then my work here is done.
 
Thank you for your help, Jared. I hope I don't need you in the near future, hehe, but I'm sure if the necessity arises, I'll have a god damn specialist there for me (do you know how I can tell? I couldn't understand half of your previous post ¬¬).

About the Windows update. Here is the SFCFix.log:

Code:
SFCFix version 2.3.0.0 by niemiro.
Start time: 2014-08-10 14:28:59.343
Using .txt script file at C:\Users\ANTONIO\Desktop\SFCFix.txt [1]




BitShift::
Corrupt Registry Data Detected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_2_for_KB978886~31bf3856ad364e35~amd64~~6.1.1.0:InstallUser:S?-
Corrupt Registry Data Detected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB978886_RTM~31bf3856ad364e35~amd64~~6.1.1.0:InstallUser:S-1-5-21?686519485-1103069314-3164421558-500
Corrupt Registry Data Detected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB978886~31bf3856ad364e35~amd64~~6.1.1.0:InstallUser:S-1-5-21-686519485-110306931?-3164421558-500
BitShift:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.3.0.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2014-08-10 14:29:05.362
Script hash: hBI6Mql4H4Bclpn1EppfVE6OvuMnGbPTS9YilWvhfmA=
----------------------EOF-----------------------

About the cbs.txt, I keep getting an Acess Denied after this line: "%windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt"
So I copied the CBS file from "C/Windows/Logs/CBS". Is it the one?
 

Attachments

I wouldn't call myself an expert by a long shot but thank you anyway, Stephen is here to help so I can assure you that you're in safe hands.
 
:banghead:

That's not what I wanted to see in the SFCFix log, because I fixed those! Obviously my fix didn't take - I'll get back to that in a little bit once I've had a think about it.

Thanks for the CBS log though, that's perfect. Some corruptions in there, so let's tackle them for the minute. That bad RAM really did a good job of corrupting a nice lot of things. I'm first going to see what SFCFix thinks about them automatically. I'm not expecting it to do much, but it might save me some work so I'm going to give it a go.

SFCFix AutoAnalysis


  1. Download SFCFix.exe and save this to your Desktop.
  2. Save any open documents and close all open windows.
  3. Double click on SFCFix.exe to open it.
  4. Follow all on screen instructions and upon completion, a file should be created on your Desktop: SFCFix.txt.
  5. Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this file into your next post for me to analyse please.


Stephen
 
Here is the log:

Code:
SFCFix version 2.3.0.0 by niemiro.
Start time: 2014-08-10 15:41:01.900
Not using a script file.




AutoAnalysis::
SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
   CBS & SFC total detected corruption count:     6
   CBS & SFC total unimportant corruption count:  0
   CBS & SFC total fixed corruption count:        0
   SURT total detected corruption count:          0
   SURT total unimportant corruption count:       0
   SURT total fixed corruption count:             0
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.3.0.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2014-08-10 15:41:21.229
Script hash: 
----------------------EOF-----------------------

Stephen, I think I already said it before, but if it is too much of a hassle, there is no problem. You already helped me beyond I could expect and I'm grateful for it. But if my computer continues to act like a douchebag (I know it is the way I'm seeing it right now) and it is too much to be done remotely, We can call it a day. I'm willing to go all the way, but I understand if you don't.
 
Sorry for the wait!

There's been a lot of discussion behind the scenes about this thread, and I've been speaking with a couple of other experts about how best to proceed with this. There is something I need to address before we continue though.

The SFC scan you did for me shows the following corruptions:

Code:
014-08-10 11:43:02, Info                  CSI    000003b8 [SR] Cannot verify component files for Microsoft-Windows-WindowsImageAcquisition-UIComponents.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"pt-BR", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral, manifest is damaged (TRUE)
2014-08-10 11:43:02, Info                  CSI    000003b9 Hashes for file member \??\C:\Windows\System32\user32.dll do not match actual file [l:20{10}]"user32.dll" :
  Found: {l:32 b:ZLnKXvzCeJQfnM8qtM3XmGY1jYwM8cxflW5e6iGsyt4=} Expected: {l:32 b:NQ7XsHlIxxbSzlHzJBcZQsU06HX79UkiUKU4W3UXY3Q=}
2014-08-10 11:43:02, Info                  CSI    000003ba [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"user32.dll" from store
2014-08-10 11:43:02, Info                  CSI    000003bb [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:18{9}]"slmgr.vbs" from store
2014-08-10 11:43:02, Info                  CSI    000003bc [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:18{9}]"slmgr.vbs" from store
2014-08-10 11:43:02, Info                  CSI    000003bd Hashes for file member \??\C:\Windows\SysWOW64\user32.dll do not match actual file [l:20{10}]"user32.dll" :
  Found: {l:32 b:/ca44IriNPpDArZVKjk1cUdV/lHRG43T48JEFeHthzE=} Expected: {l:32 b:f3VrHaBg1XZMgfjQmeNCZRhrfl5rD8oI5/s5ie9O0OQ=}
2014-08-10 11:43:02, Info                  CSI    000003be [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:20{10}]"user32.dll" from store
2014-08-10 11:43:02, Info                  CSI    000003bf Hashes for file member \??\C:\Windows\System32\slwga.dll do not match actual file [l:18{9}]"slwga.dll" :
  Found: {l:32 b:425h2+oRlwrloGRxlLfDv+kHDkuZECiH1olZNMapuPA=} Expected: {l:32 b:TbvuElzomT1l9AmstyZ6sapEsyBVwLkK2djkv/jUxI0=}
2014-08-10 11:43:02, Info                  CSI    000003c0 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:18{9}]"slwga.dll" from store
2014-08-10 11:43:02, Info                  CSI    000003c1 Hashes for file member \??\C:\Windows\SysWOW64\slwga.dll do not match actual file [l:18{9}]"slwga.dll" :
  Found: {l:32 b:TqkEGJp8yWsgRSW0EuvVyfbJc7Kg9TcMYciUZGENmGw=} Expected: {l:32 b:rLIjJfmJdWZUOjqRLM11eZc2Cuk+gTR2EbCJwUXCrpw=}
2014-08-10 11:43:02, Info                  CSI    000003c2 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:18{9}]"slwga.dll" from store
2014-08-10 11:43:02, Info                  CSI    000003c3 Hashes for file member \??\C:\Windows\System32\systemcpl.dll do not match actual file [l:26{13}]"systemcpl.dll" :
  Found: {l:32 b:5Nq5uQa/wy7FoOb7upUNHh5RysegjkGkG7IKc+9v+34=} Expected: {l:32 b:J23rBO/BHB60hSV8lBINRi+1meYDw2ZefDps6hr3o9o=}
2014-08-10 11:43:02, Info                  CSI    000003c4 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:26{13}]"systemcpl.dll" from store
2014-08-10 11:43:02, Info                  CSI    000003c5 Repair results created:

These 'corruptions' aren't actually corruptions in the way I'm talking about them - the files have actually been replaced by different versions that SFC does not expect and it is therefore flagging them as corrupt. What has replaced these files then? Well, these specific files are replaced in order to crack a copy of Windows to activate it without having to purchase a license. Pirating a copy of Windows is illegal.

If you were not aware that your Windows was Non-Genuine, contact your seller or the company that provided the computer and file a complaint. Also let Microsoft know of the problem: Protect Yourself from Piracy

If you have cracked Windows purposefully, then it is up to you how I continue. I'm more than happy to continue working on this thread, but once I fix up the issues, Windows will be flagged as non-genuine. You will need to purchase a valid license key and activate Windows legally.

Stephen
 
Are you sure? Not that I am above this, but this one isn't on me. It would not surprise me, but it was not supposed to be the case. I had this rig set up almost 5 years ago, I don't think contacting the seller is an option right now...

So I ask again, are you sure or is it a suspicion? If the former, I think the best line of action would be to update the OS to a genuine W7 or to W8.1 (what I have been avoiding since I loathe the new UI). Is it possible to do so from a non-genuine version?

Anyway, I thank you for all the help you have given me and I apologize for wasting your time, I really didn't think it was the case, since I had been updating windows normally until sometime in the past and I didn't know it was possible to do so on a non-genuine version.

You have helped me tremendously and I made one last donation in order to compensate for all the trouble I may have caused, but most of all, for the readiness, solicitude and attention you have given me throughout this thread.
 
AFAIK, IF it is counterfeit then you'll need to back everything up onto a seperate storage device and format the drive, you don't have to install Windows 8 if you don't want, just as long as it's genuine.
I'm not too sure on this.

Have you changed any parts like the motherboard in the computer to a different manufacturer?
For example, you might have bought the computer with an ASUS motherboard but if you switch to a Gigabyte board that installation becomes counterfeit if you are using the old ASUS OEM key.
It might not be intentional but you shouldn't technically do that which is why I recommend buying retail versions, whenever you replace parts the installation stays the same as there is no key for a certain manufacturer.

However, it is expensive...
To purchase Windows 7 Professional retail (or full version) it costs £245

http://www.amazon.co.uk/Microsoft-Windows-Professional-Full-Version/dp/B002DUCMTC

The equals about $410 if you're in the USA.
 
Last edited:
Hi,

I am pretty certain that your Windows has been cracked using some kind of activation exploit such as RemoveWAT (don't think it's this), HAL7600, chew7 or uODIN. However, I will collect one last log to ensure that this is the case once and for all. I will contact our activation expert here and get a final confirmation from him.

MGADiag


  1. Download MGADiag (by Microsoft) from the link below:

    http://go.microsoft.com/fwlink/?linkid=52012
  2. Run the tool by double clicking on the file. Press Continue when prompted
  3. When it has finished, press Copy then Paste (Ctrl+V) this into your next post

Is it possible to do so from a non-genuine version?
Yes, as far as I'm aware, it is. I will get confirmation on this - I may have to remove the exploit first if the upgrade fails. I don't see why it wouldn't though, but I'll help you through the process if it does.

Anyway, I thank you for all the help you have given me and I apologize for wasting your time, I really didn't think it was the case, since I had been updating windows normally until sometime in the past and I didn't know it was possible to do so on a non-genuine version.

You have helped me tremendously and I made one last donation in order to compensate for all the trouble I may have caused, but most of all, for the readiness, solicitude and attention you have given me throughout this thread.
You have most definitely not wasted my time!! This has been a fantastic thread to work on, I have personally learnt so much from it and it's been really enjoyable to help you. You've been fantastic to work with this whole time, being co-operative and answering everything I asked perfectly. It's really, really nice to work with someone so appreciative. Thank you so much for the donation again, we really appreciate them and it all goes towards the site.

(what I have been avoiding since I loathe the new UI)
It's honestly not that bad once you get used to it. I was exactly the same before I updated, and I would never look back now. I posted my views on updating to Windows 8.1 here: https://www.sysnative.com/forums/windows-8-|-windows-rt/10747-windows-8-1-a.html#post78859

Read More:

If you really don't get on with it, then I recommend this as a start menu replacement - StartIsBack - real start menu for Windows 8 and Windows 8.1. It's got the best reviews out of all of the various start menu replacements.

So, if you can get me that MGADiag report for confirmation that'd be awesome!

Stephen
 
IF it is counterfeit then you'll need to back everything up onto a seperate storage device and format the drive, you don't have to install Windows 8 if you don't want, just as long as it's genuine.
Have you changed any parts like the motherboard in the computer to a different manufacturer?
For example, you might have bought the computer with an ASUS motherboard but if you switch to a Gigabyte board that installation becomes counterfeit if you are using the old ASUS OEM key.
It might not be intentional but you shouldn't technically do that which is why I recommend buying retail versions, whenever you replace parts the installation stays the same as there is no key for a certain manufacturer.

However, it is expensive...
To purchase Windows 7 Professional retail (or full version) it costs £245

Microsoft Windows 7 Professional, Full Version (PC DVD), 1 User: Amazon.co.uk: Software

The equals about $410 if you're in the USA.
Wow, It really is a steep price.
I don’t get it, why do I need to backup and format? Is it because I won’t be able to “upgrade” from the non-genuine to the genuine directly or is it because it may have caused other harms, such as virus and whatnots?
About the changed parts, I’m certain that I changed the memory ram and the VGA while using this rig, but I’m almost sure that the MoBo and the CPU are the same since the beginning. I bought them, but I think it was a change from my previous rig and it was built from the ground up. As a matter of fact, I was studying the possibility to change the MoBo+CPU in the near future, from a ASUS+AMD to a ????+Intel. Is it (or can it be) a problem?

Hi,

I am pretty certain that your Windows has been cracked using some kind of activation exploit such as RemoveWAT (don't think it's this), HAL7600, chew7 or uODIN. However, I will collect one last log to ensure that this is the case once and for all. I will contact our activation expert here and get a final confirmation from him.

MGADiag

  1. Download MGADiag (by Microsoft) from the link below:

    http://go.microsoft.com/fwlink/?linkid=52012
  2. Run the tool by double clicking on the file. Press Continue when prompted
  3. When it has finished, press Copy then Paste (Ctrl+V) this into your next post
I’ll have to return to you tonight with that.

Yes, as far as I'm aware, it is. I will get confirmation on this - I may have to remove the exploit first if the upgrade fails. I don't see why it wouldn't though, but I'll help you through the process if it does.
Just so that I fully understand. The MGADiag above will only report through a log if it is a genuine version or not, right? After that, If we get a confirmation it is, indeed, a non-genuine version, we will have to substitute “manually” the cracked files and only them proceed with the “upgrade”. Am I getting it right?


It's honestly not that bad once you get used to it. I was exactly the same before I updated, and I would never look back now. I posted my views on updating to Windows 8.1 here: https://www.sysnative.com/forums/windows-8-|-windows-rt/10747-windows-8-1-a.html#post78859

If you really don't get on with it, then I recommend this as a start menu replacement - StartIsBack - real start menu for Windows 8 and Windows 8.1. It's got the best reviews out of all of the various start menu replacements.

So, if you can get me that MGADiag report for confirmation that'd be awesome!

Stephen
Well, it really is an upgrade I have been avoiding for the UI, mainly, and because of the not so warm reception it got from the gamer community, as it seen its performance is worse than W7 and it introduced some measures (for lack of a better or specific word) that is harmful to said environment. Anyway, if it is the case, I’m willing to make the jump. However, the price Jared mentioned is well above what I was expecting, especially because I’ll probably be facing much higher prices since I’m not from USA.
 
Well I might be able to help you with the prices if it is counterfeit, one of the perks with being at my college is I have an account to dreamspark where I get quite a few genuine Windows installations, I have a spare Windows 7 Professional Retail N version lying around.

I have used it on an old laptop but I removed it as it was too old and struggled to run Windows 7 (it's now using XP).
So it works and is genuine, if you want it then you can have it as you have donated to the site.


The problem is that when using cracking software is that it alters Windows files directly in order to prevent detection which can cause lots of issues, I've never used the upgrade option on Windows and I've never had nor will I ever intentionally use a counterfeit Windows installation so I couldn't tell you exactly whether that would work but it would be my recommendation.
 
Last edited:
Jared. You cannot share Dreamspark licences as per the Dreamspark terms. That is also illegal.
 
Windows 7 can be found much cheaper than Jared linked to: Ebuyer Mobile

I'll get back to you fully in a bit, on my phone at the moment.

Stephen

I'm just wondering though, that Windows is an OEM but for what company?
AFAIK, I may be wrong but OEM installs are for specific manufacturers and will only work for that computer, once a major component such as the motherboard has been changed it becomes counterfeit.

The one I linked to is a Windows 7 Professional Retail version.

I may be wrong about OEM installs and if I am then I apologise, enlighten me if I'm wrong.
 
Jared. You cannot share Dreamspark licences as per the Dreamspark terms. That is also illegal.

Oh... Oops...
I didn't know about that...

Sorry... :o

Yes I have just read through the terms, I'm not allowed to do that.
 
Last edited:
@Agraavan, let's clear some things up here.

Just so that I fully understand. The MGADiag above will only report through a log if it is a genuine version or not, right? After that, If we get a confirmation it is, indeed, a non-genuine version, we will have to substitute “manually” the cracked files and only them proceed with the “upgrade”. Am I getting it right?
You are correct. :) MGADiag will produce a log so I can then check for certain the legality of your OS. I will get the log looked over by NoelDP, our activation expert here. If the OS is confirmed non-genuine (which I'm almost certain of, but we'll check for sure), then we can try the upgrade. I doubt we'll need to substitute the manually cracked files, but if it fails then I can do that for you.

Judging by the type of exploit used here, I expect the upgrade install to work just fine. Whilst I personally prefer clean installs because they tend to be faster and less troublesome than upgrades, there is nothing wrong with an upgrade install. Upgrade installs let you keep your files too.

Well, it really is an upgrade I have been avoiding for the UI, mainly, and because of the not so warm reception it got from the gamer community, as it seen its performance is worse than W7 and it introduced some measures (for lack of a better or specific word) that is harmful to said environment. Anyway, if it is the case, I’m willing to make the jump. However, the price Jared mentioned is well above what I was expecting, especially because I’ll probably be facing much higher prices since I’m not from USA.

Windows 8's performance in terms of day to day use is actually much faster than Windows 7. I can't comment on it from a gamers point of view because I don't game, but in my experience it is faster.

Windows 7 is not that expensive, the one Jared linked to was very expensive! The copy of Windows 7 here: Windows 7 Home Premium w/SP1 64bit- Low Cost Packaging - Ebuyer is much more realistically priced. Yes, it says OEM, but the license terms here are very wishy washy, and if you have built a custom system or had one built for you (rather than buying something from Dell, ASUS, Acer, Lenovo etc etc), then you can use that license with no issues.

Stephen
 
I'm getting out of my league here so I'll leave this thread in good hands, I'm hoping we won't see each other very often on the BSOD threads.

Regards,

Jared
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top