none
Legit Windows XP Pro WGA tells me its counterfeit... RRS feed

  • Question

  • I recently bought a copy of windows Xp pro for my new computer, I did a clean install, wiped EVERYTHING. After installation, doing all the updates, organizing everything just the way I want, I went to update Windows Media Player 9... And to find that I did not pass the validation test. Its an OEM copy of windows, FACTORY SEALED Noone has tampered with the package how can it be counterfeit? I don't know what to do next to fix it... Help please

    Here is the MGA log

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid Product Key
    Validation Code: 8

    Cached Validation Code: N/A
    Windows Product Key: *****-*****-CY8WJ-GT687-23XFM
    Windows Product Key Hash: 4zmsnJQZceX1Ol+MbnicRZRZQ70=
    Windows Product ID: 76487-640-9909843-23710
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {C63FF574-5710-49D6-A21E-69FBC5132B91}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 8
    File Exists: Yes
    Version: 1.9.40.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: N/A, hr = 0x80004005

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C63FF574-5710-49D6-A21E-69FBC5132B91}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-23XFM</PKey><PID>76487-640-9909843-23710</PID><PIDType>1</PIDType><SID>S-1-5-21-823518204-1592454029-1801674531</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS P5N-E SLI ACPI BIOS Revision 0608</Version><SMBIOSVersion major="2" minor="4"/><Date>20070611000000.000000+000</Date></BIOS><HWID>CDF13EF70184C07A</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.9.1"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: no
    Marker string from BIOS: N/A
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A

    Thursday, February 25, 2010 2:07 PM

Answers

  • Hello Dogturbina,

    These are common characteristics of high quality counterfeit software:

    1.  The hologram is a thin label; a genuine MS CD has the hologram embedded within the plastic of the disc.

    2.  The Pid value ends in "270" or any number from "640" thru "649" which are values used for Volume Licensing, not OEM.  A real OEM CD would have a Pid= value that ends in the letters "OEM".

    3.  The product key on the CoA is a full match for a product key identified by the WGA system as "invalid" meaning it was made with a KeyGen program by the counterfeiters.

    4.  A supposedly OEM CD installs a Volume Licensing installation of XP, as yours did:  "Windows License Type: Volume"

    You can get more info and see examples of counterfeit software at Microsoft's www.howtotell.com .

    My advice to you is to return the product to the seller and demand a full refund.  If you purchased on an auction site, be sure to enlist the aid of the site or the payment processor in getting your refund.  If you paid with a credit card they may be able to assist in getting the refund, too.

    If you are unable to get the seller to refund, please click on the "Learn More Online" links that the WGA Notifier is displaying, and look for the links to apply for the complimentary replacement of your nongenuine Windows by Microsoft.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Friday, February 26, 2010 11:54 PM
    Friday, February 26, 2010 12:17 AM
  • Hello Dogturbina,

    Not much we can do for you regarding the legalities of the situation other than to give you generic advice such as, if this is a local seller, complaining to the Better Business Bureau, or you local government's consumer affair agency, or filing in small claims court.

    If you purchased on an internet auction site, follow the site's rules for entering into a dispute with the seller.  If you paid by credit card, then call the credit card company and file a claim that you did not receive the goods you paid for.

    Only Microsoft's crypto labs can Officially decide if your materials qualify as the "high quality counterfeits" that are needed to get the complimentary replacement.  But, from what you posted, IMO the odds are well in your favor.

    You can get more info regarding the varying levels of counterfeit "quality" at www.howtotell.com.

    If you do submit the request for replacement, please come back here and tell us how long it took for the process to work.  Some folks have told us they got their replacements in less than two weeks.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Friday, February 26, 2010 11:54 PM
    Friday, February 26, 2010 3:32 PM

All replies

  • Hello dogturbina,

    It is entirely possible that you inadvertently purchased a high-quality counterfeit copy of Windows XP Pro.  Please address these points:

    1.  A genuine Windows XP Pro OEM licensing kit consists of a thin blue user pamphlet and a hologrammed installation CD xhrink-wrapped together; the CD has "For distribution with a new PC only.  For product support, contact the manufacturer of the PC." or very similar words in the upper left quadrant of the disc; and affixed to the shrink wrap is a CoA sticker that is to be peeled off and affixed to the computer.

    Is that what you received?


    2.  Look closely at the CD--is the hologram a thin label affixed to the CD or is it embedded within the plastic of the CD?


    3.  Insert the CD into a computer and navigate to the \i386 folder.  Locate the setupp.ini file, which is a short text file with two sections.  Please post the second (Pid) section of this file.

    4.  Compare the partial product key reported above *****-*****-CY8WJ-GT687-23XFM with the corresponding portion of the full product key as printed on the CoA.  Do they match?  (Don't post he full product key.)
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Thursday, February 25, 2010 11:30 PM
    • Unmarked as answer by Darin Smith MS Thursday, February 25, 2010 11:30 PM
    • Proposed as answer by Darin Smith MS Thursday, February 25, 2010 11:30 PM
    Thursday, February 25, 2010 11:13 PM
  • Hello Dan,

    1. Yes it did come with the pamphlet and the hologrammed installation CD, it does say "For distribution with a new PC only. For product support contact the manufacturer of the PC" But the CoA is affixed to the back of the pamphlet not to the back of the shrink wrap. The CD obviously covering the CoA on the pamphlet.

    2. It has rough edges, i can feel the bump. And my finger nail gets caught on some sort of material before going over the hologram.

    3. Pid=76487270

    4. Yes the Product Key matches the key on the CoA.
    Thursday, February 25, 2010 11:34 PM
  • Hello Dogturbina,

    These are common characteristics of high quality counterfeit software:

    1.  The hologram is a thin label; a genuine MS CD has the hologram embedded within the plastic of the disc.

    2.  The Pid value ends in "270" or any number from "640" thru "649" which are values used for Volume Licensing, not OEM.  A real OEM CD would have a Pid= value that ends in the letters "OEM".

    3.  The product key on the CoA is a full match for a product key identified by the WGA system as "invalid" meaning it was made with a KeyGen program by the counterfeiters.

    4.  A supposedly OEM CD installs a Volume Licensing installation of XP, as yours did:  "Windows License Type: Volume"

    You can get more info and see examples of counterfeit software at Microsoft's www.howtotell.com .

    My advice to you is to return the product to the seller and demand a full refund.  If you purchased on an auction site, be sure to enlist the aid of the site or the payment processor in getting your refund.  If you paid with a credit card they may be able to assist in getting the refund, too.

    If you are unable to get the seller to refund, please click on the "Learn More Online" links that the WGA Notifier is displaying, and look for the links to apply for the complimentary replacement of your nongenuine Windows by Microsoft.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Friday, February 26, 2010 11:54 PM
    Friday, February 26, 2010 12:17 AM
  • Thank you for your quick reply Dan.

    I will try contacting the seller, no responding though.  Is there any type of legal action I can take against the seller?
    How likely is it to get a complimentary replacement? I don't want to send it in and then just be completely empty handed.
    Friday, February 26, 2010 12:25 AM
  • Hello Dogturbina,

    Not much we can do for you regarding the legalities of the situation other than to give you generic advice such as, if this is a local seller, complaining to the Better Business Bureau, or you local government's consumer affair agency, or filing in small claims court.

    If you purchased on an internet auction site, follow the site's rules for entering into a dispute with the seller.  If you paid by credit card, then call the credit card company and file a claim that you did not receive the goods you paid for.

    Only Microsoft's crypto labs can Officially decide if your materials qualify as the "high quality counterfeits" that are needed to get the complimentary replacement.  But, from what you posted, IMO the odds are well in your favor.

    You can get more info regarding the varying levels of counterfeit "quality" at www.howtotell.com.

    If you do submit the request for replacement, please come back here and tell us how long it took for the process to work.  Some folks have told us they got their replacements in less than two weeks.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Friday, February 26, 2010 11:54 PM
    Friday, February 26, 2010 3:32 PM
  • Thank you Dan for all your support and your quick answers.

     The seller already gave me a full refund just told me to send it back to him. You were really helpful, I never thought counterfeit software could look so real, now I know what to look for.

    Thank you once again.
    Friday, February 26, 2010 3:43 PM
  • Thanks Dan!

    Darin MS
    Friday, February 26, 2010 11:54 PM
  • Hello Dogturbina and Darin,

    You're welcome! :-)
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Saturday, February 27, 2010 3:01 PM