Answered by:
Windows XP wrong validation in dual boot mode

Question
-
Hello,
I've found my XP PRO system blocked after the SP3 upgrade with the message :
"Windows Product Activation" "A problem is preventing Windows from accurately checking the license for this computer . Error Code : 0x80004005" (was in fact in French)
I've finally found the solution, knowing that my system had a genuine licence, but I've also found a strange new validation behaviour
on my dual boot partition computer.
The computer is configured as follows :
PARTITION 1 in FAT32: Bootmagic with a Genuine XP SP2
(That partition is a fallback partition in case of troubles on the partition 2)
PARTITION 2 in NTFS : same Genuine XP SP2 upgraded (via download) to SP3
4 other data partitions in NTFS w/o any OS.
After the upgrade to SP3 the system was booting correctly on partition 2 NTFS.
To my surprise, my partition 1 FAT32 was found invalidated ????. No way to login except in Safe mode w/o network.
I did not understand why that partition was invalidated after that upgrade.
So I've recovered that partition from a backup dated of January 2008. (This is just a fallback partition, just in case)
Again a surprise, the newly recovered partition was usable, but now the NTFS partition 2 was invalidated.
I've booted on that partition 2 in Safe mode and here is the end of the MGDIAG V 1.7.95 result
(Genuine displayed in green with OGA status = 100)(MGADIAG 1.5 does not give that final part of the log file):
File Scan Data-->
I've quickly found that in fact MGDIAG was fetching validation data from the FAT32 partition instead on the currently used NTFS partition.
File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\licdll.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\ntdll.dll[5.1.2600.2180]
File Mismatch: C:\WINDOWS\system32\kernel32.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\crypt32.dll[5.131.2600.5512]
File Mismatch: C:\WINDOWS\system32\advapi32.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\oembios.bin[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\oembios.dat[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\oembios.sig[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]
BootMagic has to start from a FAT32 partition, so I guess the Validation service is simply tracing the boot and wrongly
gets the validation from another partition (hidden partition).
In order to discover the source of the problem, I've rebooted in safe mode on partition 1 FAT32, and discovered that this fallback partition was not yet validated on line which confirmed what I suspected earlier.
I've immediately revalidated that partition and .... partition 2 NTFS was revalidated too without running the online validation on that partition.
I guess this validation process is not normal. I've lost almost one day to find the solution ... and the reason of the problem.
Could you confirm if I'm correct or not?
According to my understanding of the licence terms, it would have been normal to invalidate a second active partition with XP.
But the scond partition is not active and hidden, so there are never two OS availabale at the same time on that machine.
If this is the intent of Microsoft to trace the boot, it will cause validation problems with other
dual boot system with different OS.
I've to add that I had a similar problem 2 weeks ago when upgrading partition 2 to SP3, so I think that the validation process
has been changed in SP3.(never happened since january 2008)
Thank you for information
YvesFriday, August 22, 2008 6:47 AM
Answers
-
Here is the Diagnostic of the NTFS partition 2 using MGADIAG :
Diagnostic Report (1.7.0095.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Validation Code: 0
Online Validation Code: N/A
Cached Validation Code: N/A
Windows Product Key: *****-*****-6MWFX-W2Y7V-C7M9D
Windows Product Key Hash: iRjqAcE2WhKCxcn35V2xMB1iOrw=
Windows Product ID: 55711-640-9771731-23892
Windows Product ID Type: 1
Windows License Type: Volume
Windows OS version: 5.1.2600.2.00010100.2.0.pro
CSVLK Server: N/A
CSVLK PID: N/A
ID: {3C7A66F4-A34E-4339-80B0-07A0754925AB}(1)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.69.2
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-282-800706ba_025D1FF3-170-800706ba_025D1FF3-171-1_025D1FF3-445-80004005_025D1FF3-178-80004005_025D1FF3-179-2_025D1FF3-199-3_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005
Resolution Status: N/AWgaER Data-->
ThreatID(s): N/A
Version: N/AWGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: Yes
Version: 1.7.18.7
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: MicrosoftOGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGATray.exe Signed By: Microsoft
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office XP Professional avec FrontPage - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-282-800706ba_025D1FF3-170-800706ba_025D1FF3-171-1_025D1FF3-445-80004005_025D1FF3-178-80004005_025D1FF3-179-2_025D1FF3-199-3_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005_B4D0AA8B-1029-80004005Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\licdll.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\ntdll.dll[5.1.2600.2180]
File Mismatch: C:\WINDOWS\system32\kernel32.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\crypt32.dll[5.131.2600.5512]
File Mismatch: C:\WINDOWS\system32\advapi32.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\oembios.bin[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\oembios.dat[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\oembios.sig[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]Other data-->
Prior partition 2 validation, both partitions were usable (partition 2 was in 30 day's grace period)
Office Details: <GenuineResults><MachineData><UGUID>{3C7A66F4-A34E-4339-80B0-07A0754925AB}</UGUID><Version>1.7.0095.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-C7M9D</PKey><PID>55711-640-9771731-23892</PID><PIDType>1</PIDType><SID>S-1-5-21-299502267-1563985344-725345543</SID><SYSTEM/><BIOS/><HWID>2B0130570184AE7F</HWID><UserLCID>080C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Paris, Madrid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>2</stat><msppid></msppid><name>Windows XP Pro [Corporate] Coccinelle</name><model>Edition Métamorphose</model></SBID><OEM/><BRT/></MachineData> <Software><Office><Result>100</Result><Products><Product GUID="{9028040C-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Professional avec FrontPage</Name><Ver>10</Ver><Val>8427005CC4BE88A</Val><Hash>qAa9Blp1+qtu/0KizA2P05cRabQ=</Hash><Pid>54865-640-0215733-17484</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="10" Result="100"/><App Id="16" Version="10" Result="100"/><App Id="17" Version="10" Result="100"/><App Id="18" Version="10" Result="100"/><App Id="1A" Version="10" Result="100"/><App Id="1B" Version="10"
Result="100"/></Applications></Office></Software></GenuineResults>
When I've validated the first partition online with the same key, I did not do anything on partition 2 and it was immediately again usable.
Thank you for your explanation. I'd like to erase the first partition and replace it with Linux so it could invalidate again partition 2.
Yves
- Marked as answer by RickImAPC Friday, August 22, 2008 8:31 PM
Friday, August 22, 2008 6:40 PM
All replies
-
YLG80,
Please download and run the MS Genuine Diagnostic Tool utility at this link http://go.microsoft.com/fwlink/?linkid=52012 , then click the Windows tab, Copy to Clipboard, then paste the report into a New Post on this Forum.Step 2 is telling us about the COA. Tell us:
1. What edition of Windows XP is it for, Home, Pro, or Media Center?
2. Does it read "OEM Software" or "OEM Product" in black lettering?
3. Or, does it have the computer manufacturer's name in black lettering?
4. DO NOT post the Product Key.
5. Please also provide a short description of the issue you are experiencing.
NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.
Thanks for your continued support.
Rick, MSFriday, August 22, 2008 5:56 PM -
Here is the Diagnostic of the NTFS partition 2 using MGADIAG :
Diagnostic Report (1.7.0095.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Validation Code: 0
Online Validation Code: N/A
Cached Validation Code: N/A
Windows Product Key: *****-*****-6MWFX-W2Y7V-C7M9D
Windows Product Key Hash: iRjqAcE2WhKCxcn35V2xMB1iOrw=
Windows Product ID: 55711-640-9771731-23892
Windows Product ID Type: 1
Windows License Type: Volume
Windows OS version: 5.1.2600.2.00010100.2.0.pro
CSVLK Server: N/A
CSVLK PID: N/A
ID: {3C7A66F4-A34E-4339-80B0-07A0754925AB}(1)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.69.2
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-282-800706ba_025D1FF3-170-800706ba_025D1FF3-171-1_025D1FF3-445-80004005_025D1FF3-178-80004005_025D1FF3-179-2_025D1FF3-199-3_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005
Resolution Status: N/AWgaER Data-->
ThreatID(s): N/A
Version: N/AWGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: Yes
Version: 1.7.18.7
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: MicrosoftOGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGATray.exe Signed By: Microsoft
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office XP Professional avec FrontPage - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-282-800706ba_025D1FF3-170-800706ba_025D1FF3-171-1_025D1FF3-445-80004005_025D1FF3-178-80004005_025D1FF3-179-2_025D1FF3-199-3_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005_B4D0AA8B-1029-80004005Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\licdll.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\ntdll.dll[5.1.2600.2180]
File Mismatch: C:\WINDOWS\system32\kernel32.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\crypt32.dll[5.131.2600.5512]
File Mismatch: C:\WINDOWS\system32\advapi32.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\oembios.bin[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\oembios.dat[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\oembios.sig[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]Other data-->
Prior partition 2 validation, both partitions were usable (partition 2 was in 30 day's grace period)
Office Details: <GenuineResults><MachineData><UGUID>{3C7A66F4-A34E-4339-80B0-07A0754925AB}</UGUID><Version>1.7.0095.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-C7M9D</PKey><PID>55711-640-9771731-23892</PID><PIDType>1</PIDType><SID>S-1-5-21-299502267-1563985344-725345543</SID><SYSTEM/><BIOS/><HWID>2B0130570184AE7F</HWID><UserLCID>080C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Paris, Madrid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>2</stat><msppid></msppid><name>Windows XP Pro [Corporate] Coccinelle</name><model>Edition Métamorphose</model></SBID><OEM/><BRT/></MachineData> <Software><Office><Result>100</Result><Products><Product GUID="{9028040C-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Professional avec FrontPage</Name><Ver>10</Ver><Val>8427005CC4BE88A</Val><Hash>qAa9Blp1+qtu/0KizA2P05cRabQ=</Hash><Pid>54865-640-0215733-17484</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="10" Result="100"/><App Id="16" Version="10" Result="100"/><App Id="17" Version="10" Result="100"/><App Id="18" Version="10" Result="100"/><App Id="1A" Version="10" Result="100"/><App Id="1B" Version="10"
Result="100"/></Applications></Office></Software></GenuineResults>
When I've validated the first partition online with the same key, I did not do anything on partition 2 and it was immediately again usable.
Thank you for your explanation. I'd like to erase the first partition and replace it with Linux so it could invalidate again partition 2.
Yves
- Marked as answer by RickImAPC Friday, August 22, 2008 8:31 PM
Friday, August 22, 2008 6:40 PM -
Diagnostic Report (1.9.0011.0):
-----------------------------------------
WGA Data-->
Validation Status: Geographically blocked PID
Validation Code: 13
Cached Validation Code: N/A
Windows Product Key: *****-*****-2487J-KWKMF-RPWBY
Windows Product Key Hash: A6tqZpYlrSkfmUWcaNDswSdRpOo=
Windows Product ID: 55274-640-8834005-23401
Windows Product ID Type: 1
Windows License Type: Volume
Windows OS version: 5.1.2600.2.00010100.3.0.pro
ID: {E7DA8203-8433-4C5B-A40F-A4C7FAE7F63E}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.9.40.0
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-230-1
Resolution Status: N/A
WgaER Data-->
ThreatID(s): N/A
Version: N/A
WGA Notifications Data-->
Cached Result: 13
File Exists: Yes
Version: 1.9.40.0
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: Microsoft
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-230-1
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{E7DA8203-8433-4C5B-A40F-A4C7FAE7F63E}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-RPWBY</PKey><PID>55274-640-8834005-23401</PID><PIDType>1</PIDType><SID>S-1-5-21-1220945662-746137067-854245398</SID><SYSTEM><Manufacturer>VIA Technologies, Inc.</Manufacturer><Model>KT400-8235</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="2"/><Date>20031007000000.000000+000</Date></BIOS><HWID>E31E3BCF0184207B</HWID><UserLCID>040F</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Licensing Data-->
N/A
HWID Data-->
N/A
OEM Activation 1.0 Data-->
BIOS string matches: no
Marker string from BIOS: N/A
Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005
OEM Activation 2.0 Data-->
N/A
I've had this on my computer for nearly a year and I only started getting this yesterday. And as far as I know I got the proper key and did everything properly and did not use a copy or a stolen key. It was all sealed up when I got my CD with the product key so why is it giving me trouble now!Sunday, August 30, 2009 12:09 PM