You are on page 1of 10

-------------------------------------------------------------------------

Windows 7 (and Vista) Hacktivation explained, both OEM and BootLoader


-------------------------------------------------------------------------
Executive Summary
-----------------
A major breakthrough in Windows 7 Hacktivation happened over the
last 4 days since we've discovered how to activate old (pre-Vista)
Dell, Lenovo, HP... (and probably many others TBD) computers
which originally shipped with Windows XP and on which none of the
Windows7loaders worked until then.
This new method was integrated yesterday into
"Windows 7 loader version 1.5.4 by Daz" (provided in this torrent)
so this tool is now able to hacktivate Windows 7 installation
on which none of the previous loaders used to work : it provides
- a default loader for most computers
- a new, experimental loader, mostly for Macs, to speed up boot time
- the older/classic loader for old Dell/HP/Lenovo/... computers on
which no other loader worked until yesterday.
Because of this, this loader is now the preferred Recommended loader
for Windows 7 Hacktivation on the MyDigitalLife community:
http://forums.mydigitallife.info/showthread.php?t=7126
over outdated ones such as 7loader from Hazar/Orbit30
which cannot hacktivate a whole class of older computers.
Please check http://forums.mydigitallife.info/showthread.php?t=8632
as Daz/zsmin are regularly updating and posting new & improved versions.
This URL also contains the ChangeLog of the different versions.
Try this loader: if it works for you, you're all set and you don't
need to read below to understand how Windows 7 activation works.
Location of Microsoft MSDN untouched/unmodified English originals :
-------------------------------------------------------------------
Windows 7:
- All versions! http://www.demonoid.com/files/details/2025207/
- Ultimate:
* 32-bit: http://www.demonoid.com/files/details/2023916/
* 32-bit with Language Pack: http://www.demonoid.com/files/details/2024033/
* 64-bit: http://www.demonoid.com/files/details/2023790/
* 64-bit with Language Pack: http://www.demonoid.com/files/details/2024083/
- Professional 64-bit: http://www.demonoid.com/files/details/2024199/
- Enterprise:
* 32-bit: http://www.demonoid.com/files/details/2025049/
* 64-bit: http://www.demonoid.com/files/details/2024661/
Windows Vista with Service Pack 2: all editions including Ultimate,
both 32 and 64-bit: http://www.demonoid.com/files/details/1981431/

French: Windows 7 Ultimate:


- 32 bits: http://www.demonoid.com/files/details/2048468/
- 64 bits: http://www.demonoid.com/files/details/2048713/
Windows Vista with Service Pack 2: all editions including Ultimate:
http://www.demonoid.com/files/details/1966795/
Looking for more languages ?
Search on Demonoid, or check
http://forums.mydigitallife.info/showthread.php?t=8114
MANIFEST - Contents of this torrent
-----------------------------------
40-CERTS.zip :
list of 40 manufacturers' OEM.xrm-ms XrML License Certificates
PubKeyCompare_1.0.0.5.zip :
Tool to compare the Public Key stored inside a XrML License Certificate
and a BIOS SLIC files (to ensure they are paired and match)
README.txt :
This file... typos and updates will be posted on the description
of this torrent on Demonoid
RWeverything-v1.3.zip :
Read/Write Everything version 1.3, an advanced BIOS inspection tool
(Everest and others are not sufficient anymore to inspect the
contents of ACPI tables in depth)
SLIC-2.1-BINS.7z :
Binary dumps of various OEM BIOS ACPI SLIC version 2.1 tables.
Useful for inspection with RWeverything, or to build your own loader
following the instructions I've posted at
http://forums.mydigitallife.info/showthread.php?t=9126
SLICinfo-1.0.0.5.zip :
Tool to display information in a BIOS SLIC filedump (.bin)
win7keys.txt :
Exhaustive list of known Windows 7 keys currently.
The most useful ones are the OEM:SLP ones since Microsoft cannot
blacklist them : millions of PCs shipped by OEMs with Windows 7
pre-activated wouldn't work anymore if they did !
Win7-MSDN-Checksums.txt :
Some SHA-1 checksums of the original (untouched/unmodified) MSDN
official Windows 7 distributions ISOs. Useful if you're security
conscious and you want to ensure the operating system you're installing
hasn't been tampered by "unknown" people... Think twice before installing
"custom" hacked distributions, especially if you intend to access your
online bank account from it! Prevents spywares, keyloggers, and other
nasty surprises. Get all checksums from:
http://msdn.microsoft.com/en-us/subscriptions/downloads/default.aspx
Another advantage of using an original Microsoft MSDN distribution :
you know *exactly* which tool you used to activate your copy of
Windows 7, so if some Microsoft Update was to disable your activation
in the future, just reuse the same tool to re-activate it, or use a
newer version of the same tool since you know it works on your system !
Windows7Loader-v1.5.4.zip :
The Recommended Loader on MyDigitalLife (over Hazar/Orbit30 and others)
since it can now activate a whole class of older computers on which
none of the activators worked until yesterday.
Check http://forums.mydigitallife.info/showthread.php?t=8632 for updates!
WinHex-15.4.zip :
WinHex 15.4, an advanced hexadecimal editor for inspecting files
and partitions. Downloaded from http://www.x-ways.net/winhex/
Don't be surprised if WinHex triggers 2/41 matches on VirusTotal:
eSafe: Suspicious File, and
Norman : "File Type Signatures Search.txt"
Download it from the official website to verify it hasn't been modified.
WinHex15-keygen.zip :
Key Generator to unlock WinHex advanced features and allowing you
to save files over 200 KiB.

Technical details: understanding Windows 7 (and Vista) activation


-----------------------------------------------------------------
Windows XP used to have offline activation for corporations
(Volume License Keys for XP Professional).
Windows Vista and Windows 7 do not.
Even if you want to use the key printed on your OEM sticker on your
computer, you still have to contact or call Microsoft to activate
your edition of Windows.
However, OEMs (Original Equipment Manufacturers, such as Dell, HP, Asus...)
have a System-Locked Pre-activation ("OEM SLP") method so that the
consumer buying an OEM pre-activated computer does not have to contact
Microsoft to activate Windows. Such an activation requires 3 components:
- a few magical bytes in the computer BIOS (ACPI) hardware:
for Windows Vista, it must be a "SLIC version 2.0" table,
for Windows 7, it must be a "SLIC version 2.1" table.
This table identifies the name of the OEM, such as Dell.
- a matching XML license file, typically called Dell.xrm-ms,
which is pre-installed by the OEM and present on the OEM Windows
recovery/reinstallation DVD.
This file must match the BIOS ACPI SLIC tag or activation will fail !
- an OEM:SLP key (serial number) entered in Windows.
OEMs do NOT enter the unique key/serial number they print on your computer
sticker to pre-activate Windows.
Using this key forces you to contact Microsoft for activation !
Instead, they use generic OEM:SLP keys to mass-activate offline all the
computers they build with the same key.
These keys are interesting because
- it's an offline activation which does not contact Microsoft,
which makes it harder for Microsoft to blacklist them
- Microsoft cannot simply blacklist these keys anyway since they
are legitimately used by millions of consumers who bought
an OEM PC pre-installed with an authentic copy of Windows !
Keys for Vista/7 do not encode the name of the manufacturers,
such as Dell or HP. In fact, most manufacturers used the exact same key
for Vista.
Keys do not encode whether your OS is 32-bit or 64-bit.
This is on purpose, as most PCs will end up having more than 3 GiB of RAM,
and Microsoft needs to upgrade everyone progressively to 64-bit technology.
Keys do not encode the language (such as English or French) of your
Windows OS either.
Keys encode your edition of Vista, such as Ultimate,
and the key type, such as OEM:SLP, or Retail, or OEM (sticker, not SLP).
Why is this useful to you ?
You need to find out what you have in your BIOS.
- If your computer pre-dates Vista, you probably don't have a SLIC
table at all, so you'll probably need to use a "loader" to emulate a
SLIC table in software.
- If your computer was shipped between 2007 and mid-2009 with Windows
Vista pre-installed, you most probably have a SLIC version 2.0 table.
You'll need to check for any BIOS upgrade on your manufacturer's
website. If you're lucky and flashing your BIOS with the latest
version upgrades your SLIC table to version 2.1, you just gained a
free Windows 7 upgrade !
- If your computer was shipped after mid-2009 with Windows pre-installed,
you most probably have a SLIC version 2.1, and you may also have
received an upgrade coupon allowing you to upgrade to Windows 7
when it ships.
How to inspect your BIOS
------------------------
Beware of Vista/7 "loaders" as their whole point is to insert fake SLIC
entries in memory when the ACPI BIOS doesn't have any.
The only reliable way to find out if you have a real SLIC in your hardware
is to boot on a Windows DVD, format your disk/partition, install Windows
and inspect your BIOS *before* running any "loader".
Loaders also hack your boot sector.
As usual, this can make your computer unbootable.
You can lose all data, and may have to reformat
and reinstall your operating system from scratch.
Ensure you have backed up all of your data before proceeding.
(on a lighter note, you can't brick your computer since we're not doing
hardware modifications such as flashing the BIOS, so the worst that
can happen is that you have to reformat and reinstall everything)
Due to the variety of Hacked BootLoaders and Hacked Windows 7
distributions out there, this README will only support FRESH (VIRGIN)
INSTALLATIONS of an UNTOUCHED/UNMODIFIED MSDN Windows 7 distribution.
The explanations will be for Windows 7 Ultimate ONLY.
They may or may not work with other editions since some of them
like Enterprise have special requirements for activation.
In any case, you'll need to choose the proper key in win7keys.txt,
provides that it exists. But there is no reason to install anything else
than Windows 7 Ultimate anyway :-)
The explanations work for 32-bit or 64-bit original MSDN distributions,
in any language, as the keys are not language or 32/64-bit specific.

Say goodbye to your data, turn off your computer,


insert the Windows 7 Ultimate DVD, turn on your computer and hit F12
(or whatever the BootMenu key is on your computer)
a few times when the OEM logo appears on the BIOS.
In the "Boot Device Menu", select
"Onboard or USB CD-ROM drive" to boot from the DVD.
Shortly after, hit return when the prompt
"Press any key to boot from CD or DVD" appears.
Choose your language and keyboard preferences.
"Install now"
Accept the license terms.
Even if you are presented with the "Upgrade" option
on the "Which type of installation do you want?", I suggest
selecting "Custom (advanced) instead".
On the next screen, you are presented with the list of your
existing disk partitions. Click on "Drive options (advanced)".
Then select each partition and click "Delete" until they are
all deleted. Finally select the empty disk space/partition
where you want to install Windows 7 and click "Next".
When requested to enter a key/serial number, DO NOT ENTER ANY KEY,
and uncheck [ ] Automatically activate Windows when I'm online.
15 minutes later, when your computer is completely installed,
check your PC manufacturer's website to verify whether there is
a BIOS update available. A recent BIOS update could add "official"
SLIC licenses for Windows 7 and Vista to your computer !
If you find a BIOS update, flash your BIOS according to your
manufacturer's instructions and reboot your computer.
Insert the USB key where you have stored RWeverything-v1.3.zip
and copy this file in your "Documents Library".
Safely Remove Hardware : USB key, and unplug it.
Right click on "RWeverything-v1.3.zip" and select "Extract All..."
Go into the "RWeverything-v1.3" folder and run SetupRw.exe
This will install R/W Everywhere on your PC, an advanced BIOS
inspection tool.
PS: on 64-bit systems, installing R/W Everywhere may switch
your Windows into "Test mode" as it has an unsigned driver.
This mark in the lower right screen corner will disappear when
you uninstall R/W Everywhere from your computer.
You can also open an elevated Command Prompt ("Run as Administrator")
and run "bcdedit.exe /set TESTSIGNING OFF" to disable it.
Run R/W Everywhere, and click on the ACPI button in the Toolbar.
Wait up to 30 seconds for it to disassemble your ACPI BIOS.
Check if you have a "SLIC" tab, next to the "RSDT", "XSDT", "SSDT",
"FACP", "FACS", "HPET", "APIC"... ones.
If you don't see a SLIC tab, you do not have any "license"
in your BIOS, and given the current state of BIOS "modding" (hacking)
technology, adding one in your hardware is not feasible --
the risks of "bricking" your computer are too high.
You will need to use a software bootloader to fake a SLIC table
in memory if you want to OEM:SLP activate Vista/7 offline
(without contacting Microsoft).
If you see a SLIC tab, here's how to find if you have
a SLIC version 2.0 (Vista) or 2.1 (Windows 7):
Click on the SLIC tab.
Look under the hexadecimal dump for "pretty printed" disassembled version.
It should read:
Signature "SLIC"
Length 0x00000176 (374)
Revision 0x01 (1)
Checksum 0x47 (71)
OEM ID "DELL "
OEM Table ID "M07 "
OEM Revision 0x27D60C12 (668339218)
Creator ID "ASL "
Creator Revision 0x00000061 (97)
OEM Public Key Structure
Type 0x00000000 (0)
Length 0x0000009C (156)
Key Type 0x06 (6)
Version 0x02 (2)
Reserved 0x0000 (0)
Algorithm 0x00002400 (9216)
Magic "RSA1"
Bit Length 0x00000400 (1024)
Exponent 0x00010001 (65537)
Modulus 0x7F 0xF6 0xC1 0x05 0xBE 0x5C 0x57
(...)
SLIC Marker Structure
Type 0x00000001 (1)
Length 0x000000B6 (182)
Version 0x00020000 (131072)
OEM ID "DELL "
OEM Table ID "M07 "
Windows Flag "WINDOWS "
Reserved 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
0x00 0x00 0x00 0x00 0x00 0x00 0x00
Signature 0x51 0xE9 0xA5 0xCD 0x35 0x30 0x91 0xB0 0x9B 0xC0 0xCE 0x05 0xFA
0x26 0xB5 0x43
(...)
Look at the Reserved line after the Windows Flag "WINDOWS "
If it starts with:
Reserved 0x00 0x00 0x00 ... (all zeroes)
you have a SLIC version 2.0 tag (System Locked Preactivation 2.0)
for Vista only.
If it starts with:
Reserved 0x01 0x00 0x02 0x00 0x00 ... (all zeroes)
you have a SLIC version 2.1 tag (System Locked Preactivation 2.1)
which allows you to OEM:SLP activate Windows 7... or Vista !
Windows 7 requires a SLIC version 2.1,
while Vista requires a SLIC of any version, 2.0 or 2.1.

How to activate Windows 7 with a SLIC v2.1


------------------------------------------
If you have a SLIC table version 2.1 in your ACPI BIOS,
you have a "real" license for Windows 7 (and Vista, your choice).
You just need to
- find a OEM.xrm-ms XML License Certificate matching
your manufacturer's "OEM ID" as it appears in your SLIC tab.
In the example above, the "OEM ID" is Dell.
Look in the file "40-CERTS.zip" in this torrent: it has License Certificates
for 40 different manufacturers !
In case they are multiple Certificates for your OEM, such as Toshiba,
use the SLIC table entries as a guidance on which one to choose:
if your "OEM Table ID" is "TOSINV", use TOSHIBA-TOSINV.XRM-MS
You also need an OEM:SLP Product key: check the file win7keys.txt
in this torrent. The 3 known Windows 7 Ultimate OEM:SLP keys
at the moment (Dell, Lenovo, Acer) are at the top.
You can use any key on any OEM equipment, as the product keys
do not encode the OEM: the Dell key will work on an Acer computer
and vice-versa. In fact, it looks like almost all OEMs used the
exact same key for Vista.
Go into the Start Menu, All Programs, Accessories,
mouse over "Command Prompt", RIGHT CLICK on it and select
"Run as Administrator".
The screen will gray out, the User Account Control windows will appear.
Confirm that you want to run this Command Prompt Elevated.
The Window title should be "Administrator: Command Prompt"
and the prompt should typically be C:\Windows\system32>.
If the prompt is only "Command Prompt" and the prompt displays
C:\Users\YourUserName>, it means you screwed up and didn't open
this Command Prompt as Administrator, so try again until you succeed :-)
Change directory to where you placed the proper OEM.xrm-ms file
you need to use on your computer, for example :
cd \Users\YourUserName\Documents
dir
and verify the OEM.xrm-ms file is in the current directory
(replace "OEM.xrm-ms" with "Dell.xrm-ms" or whatever the name of your
"OEM ID" is in your SLIC table)
Install the XRM-MS License Certificate with :
SLMGR -ilc OEM.xrm-ms
(wait a few seconds until a popup appears confirming the certificate
was successfully installed)
The caps in SLMGR are not necessary -- you can type "slmgr".
But it's SLMGR like "Software License ManaGeR",
and not SIMGR or S1MGR :-)
MAKE SURE YOU ARE NOT CONNECTED TO THE NETWORK TO PERFORM THIS STEP !
(this ensures this is an offline activation which does not attempt
to contact Microsoft in any way...)
For wired connections, the easiest way to disconnect is to unplug
your Ethernet cable.
For Wireless connections: RIGHT-CLICK on the Network icon in the
System Tray (lower right corner of the screen next to the time/date),
select "Open Network and Sharing Center",
on the left hand-side menu of the window, select "Change adapter settings"
and for each active network connection, right-click on it and select
DISABLE. Keep this window open as we'll need it again in a few seconds.
Install the Windows 7 Ultimate OEM:SLP key you've chosen in
the win7keys.txt file. In my case, I've picked the Dell one (2d line)
SLMGR -ipk 342DG-6YJR8-X92GV-V7DCV-P4K27
(wait up to 30 seconds until a popup appears confirming the product key
was successfully installed)
You can now reconnect to the network :
plug back the Ethernet cable, or if you right-clicked and DISABLEd
any Network connection, you can now right-click and ENABLE them back.
Close all windows and reboot your computer.
When you're logged into Windows, go into the Start Menu,
RIGHT-CLICK on Computer (left-hand side) and select "Properties".
At the very bottom of the screen, it should read
"Windows activation : Windows is activated"
You can also confirm it by opening a "regular" Command Prompt
(Start Menu, All Programs, Accessories, Command Prompt) and run:
slmgr -dlv
It reads:
Partial Product Key: P4K27 (the last 5 letters/numbers of the key you entered)
Licence Status: Licensed
PS: you can also use "Windows 7 Loader version 1.5.4 by Daz" or any later
version to perform these two steps easily, using the
"Bios mod users : Install certificate and serial" button.

How to activate Windows 7 without a SLIC


----------------------------------------
You have to use a bootloader which emulates a SLIC in memory,
as the current state of BIOS modding technology does not permit
to create/insert a SLIC in your hardware BIOS from scratch,
except in very special circumstances.
If you're interested by exploring BIOS modding technology,
check the MyDigitalLife forum at
http://forums.mydigitallife.info/forumdisplay.php?f=16
for state-of-the-art information on this topic.
Run "Windows 7 Loader version 1.5.4 by Daz" or any later version.
You need to use the "Soft mod users" section.
Try installing the default loader, which works on most computers.
Beware it modifies the boot sector, and you risk not being able to
boot (at all).
Unfortunately, one size doesn't fit all for bootloader technology,
and it's pretty much a trial-and-error approach until you find the
one which works on your computer.
Close all windows and reboot your computer.
When you're logged into Windows, go into the Start Menu,
RIGHT-CLICK on Computer (left-hand side) and select "Properties".
At the very bottom of the screen, it should read
"Windows activation : Windows is activated"
You can also confirm it by opening a "regular" Command Prompt
(Start Menu, All Programs, Accessories, Command Prompt) and run:
slmgr -dlv
It reads:
Partial Product Key: P4K27 (the last 5 letters/numbers of the key you entered)
Licence Status: Licensed
If this doesn't work to hacktivate your Windows 7 copy,
run "Windows 7 Loader version 1.5.4 by Daz" again (or any later version)
and in the "Soft mod users" section, check "Use the older loader".
This is useful for older (pre-Vista) Dell computers such as
Optiplex GX520/GX620 and many others, maybe some HP and other vendors too.
Reboot and check your activation status again.
If both are failing, try the "new experimental loader".
This is mostly useful on Mac computers to avoid extra delays when booting.
If all 3 versions are failing, please report your problem on
the MyDigitalLife forum with a complete R/W Everywhere export of your
computer ACPI tables.

How to activate Windows 7 with a SLIC version 2.0


-------------------------------------------------
Your SLIC version 2.0 entitles you to a legitimate license
for any Vista edition you want using the method explained
in the "How to activate Windows 7 with a SLIC v2.1" section :
In a nutshell, from an elevated Vista Command Prompt:
- install your OEM Certificate:
SLMGR -ilc OEM.xrm-ms
- install a Vista Ultimate OEM:SLP key, such as:
SLMGR -ipk 6F2D7-2PCG6-YQQTB-FWK9V-932CC
However, you probably want to upgrade to Windows 7 instead,
and for this you need to upgrade your BIOS SLIC v2.0 into version 2.1.
If you're willing to risk "bricking" your PC by flashing a custom,
hacked BIOS (there's typically a 1% chance of bricking it)
check the explanations and the already modded and verified-as-working
custom BIOSes on the MyDigitalLife forum at
http://forums.mydigitallife.info/forumdisplay.php?f=16
Otherwise, a less risky approach is to use a software bootloader
once again to try to override the SLIC v2.0 in memory with a custom
SLIC v2.1 table.
Use the instructions in the section
"How to activate Windows 7 without a SLIC" above
to run "Windows 7 Loader version 1.5.4 by Daz" or any later version
and try each of the 3 loaders in the "Soft mod users" section
until you find one which works on your system.
-------------------------------------------------------------------------
Version 1.0, 3 Sept 2009 by Downloadix
Written exclusively for Demonoid.com
Follow-up to "Microsoft Windows Vista SP2 (or SP1) activation
(both OEM and BootLoader) explained", posted at
http://www.demonoid.com/files/details/1744117/
Please leave a comment if you found this tutorial useful.
If you used this activation method and it worked for you, please
provide as much detail as possible in your comment, such as:
"Hacktivated Windows 7 Ultimate 64-bit French on a Dell Optiplex GX620.
No SLIC in BIOS, used the older loader in Windows 7 Loader v1.5.4 by Daz".
That's all folks :-)
-------------------------------------------------------------------------
END OF FILE

You might also like