locked
Windows XP wrong validation in dual boot mode RRS feed

  • Question

  • Hello,

    I've found my XP PRO system blocked after the SP3 upgrade with the message :

    "Windows Product Activation" "A problem is preventing Windows from accurately checking the license for this computer . Error Code : 0x80004005" (was in fact in French)

    I've finally found the solution, knowing that my system had a genuine licence, but I've also found a strange new validation behaviour
    on my dual boot partition computer.
    The computer is configured as follows :
    PARTITION 1 in FAT32: Bootmagic with a Genuine XP SP2
                                        (That partition is a fallback partition in case of troubles on the partition 2)
    PARTITION 2 in NTFS : same Genuine XP SP2 upgraded (via download) to SP3
    4 other data partitions in NTFS w/o any OS.

    After the upgrade to SP3 the system was booting correctly on partition 2 NTFS.
    To my surprise, my partition 1 FAT32 was found invalidated ????. No way to login except in Safe mode w/o network.
    I did not understand why that partition was invalidated after that upgrade.

    So I've recovered that partition from a backup dated of January 2008. (This is just a fallback partition, just in case)

    Again a surprise, the newly recovered partition was usable, but now the NTFS partition 2 was invalidated.

    I've booted on that partition 2 in Safe mode and here is the end of the MGDIAG V 1.7.95 result 
    (Genuine displayed in green with OGA status = 100)(MGADIAG 1.5 does not give that final part of the log file):

    File Scan Data-->
    File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\licdll.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\ntdll.dll[5.1.2600.2180]
    File Mismatch: C:\WINDOWS\system32\kernel32.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\crypt32.dll[5.131.2600.5512]
    File Mismatch: C:\WINDOWS\system32\advapi32.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\oembios.bin[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\oembios.dat[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\oembios.sig[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]

    I've quickly found that in fact MGDIAG was fetching validation data from the FAT32 partition instead on the currently used NTFS partition.
    BootMagic has to start from a FAT32 partition, so I guess the Validation service is simply tracing the boot and wrongly
    gets the validation from another partition (hidden partition).
    In order to discover the source of the problem, I've rebooted in safe mode on partition 1 FAT32, and discovered that this fallback partition was not yet validated on line which confirmed what I suspected earlier.

    I've immediately revalidated that partition and .... partition 2 NTFS was revalidated too without running the online validation on that partition.

    I guess this validation process is not normal. I've lost almost one day to find the solution ... and the reason of the problem.
    Could you confirm if I'm correct or not?
    According to my understanding of the licence terms, it would have been normal to invalidate a second active partition with XP.
    But the scond partition is not active and hidden, so there are never two OS availabale at the same time on that machine.

    If this is the intent of Microsoft to trace the boot, it will cause validation problems with other
    dual boot system with different OS.

    I've to add that I had a similar problem 2 weeks ago when upgrading partition 2 to SP3, so I think that the validation process
    has been changed in SP3.(never happened since january 2008)

    Thank you for information
    Yves


    Friday, August 22, 2008 6:47 AM

Answers

  • Here is the Diagnostic of the NTFS partition 2 using MGADIAG :

    Diagnostic Report (1.7.0095.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-6MWFX-W2Y7V-C7M9D
    Windows Product Key Hash: iRjqAcE2WhKCxcn35V2xMB1iOrw=
    Windows Product ID: 55711-640-9771731-23892
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {3C7A66F4-A34E-4339-80B0-07A0754925AB}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-282-800706ba_025D1FF3-170-800706ba_025D1FF3-171-1_025D1FF3-445-80004005_025D1FF3-178-80004005_025D1FF3-179-2_025D1FF3-199-3_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: Yes
    Version: 1.7.18.7
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office XP Professional avec FrontPage - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-282-800706ba_025D1FF3-170-800706ba_025D1FF3-171-1_025D1FF3-445-80004005_025D1FF3-178-80004005_025D1FF3-179-2_025D1FF3-199-3_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005_B4D0AA8B-1029-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\licdll.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\ntdll.dll[5.1.2600.2180]
    File Mismatch: C:\WINDOWS\system32\kernel32.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\crypt32.dll[5.131.2600.5512]
    File Mismatch: C:\WINDOWS\system32\advapi32.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\oembios.bin[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\oembios.dat[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\oembios.sig[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{3C7A66F4-A34E-4339-80B0-07A0754925AB}</UGUID><Version>1.7.0095.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-C7M9D</PKey><PID>55711-640-9771731-23892</PID><PIDType>1</PIDType><SID>S-1-5-21-299502267-1563985344-725345543</SID><SYSTEM/><BIOS/><HWID>2B0130570184AE7F</HWID><UserLCID>080C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Paris, Madrid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>2</stat><msppid></msppid><name>Windows XP Pro [Corporate] Coccinelle</name><model>Edition Métamorphose</model></SBID><OEM/><BRT/></MachineData>   <Software><Office><Result>100</Result><Products><Product GUID="{9028040C-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Professional avec FrontPage</Name><Ver>10</Ver><Val>8427005CC4BE88A</Val><Hash>qAa9Blp1+qtu/0KizA2P05cRabQ=</Hash><Pid>54865-640-0215733-17484</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="10" Result="100"/><App Id="16" Version="10" Result="100"/><App Id="17" Version="10" Result="100"/><App Id="18" Version="10" Result="100"/><App Id="1A" Version="10" Result="100"/><App Id="1B" Version="10"
    Result="100"/></Applications></Office></Software></GenuineResults> 

    Prior partition 2 validation, both partitions were usable (partition 2 was in 30 day's grace period)
    When I've validated the first partition online with the same key, I did not do anything on partition 2 and it was immediately again usable. 

    Thank you for your explanation. I'd like to erase the first partition and replace it with Linux so it could invalidate again partition 2.

    Yves
     


    • Marked as answer by RickImAPC Friday, August 22, 2008 8:31 PM
    Friday, August 22, 2008 6:40 PM

All replies

  • YLG80,

    Please download and run the MS Genuine Diagnostic Tool utility at this link http://go.microsoft.com/fwlink/?linkid=52012 , then click the Windows tab, Copy to Clipboard, then paste the report into a New Post on this Forum.  

    Step 2 is telling us about the COA. Tell us:

    1. What edition of Windows XP is it for, Home, Pro, or Media Center?

    2. Does it read "OEM Software" or "OEM Product" in black lettering?

    3. Or, does it have the computer manufacturer's name in black lettering?

    4. DO NOT post the Product Key.

    5. Please also provide a short description of the issue you are experiencing.

     

    NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.


    Thanks for your continued support.

    Rick, MS 

    Friday, August 22, 2008 5:56 PM
  • Here is the Diagnostic of the NTFS partition 2 using MGADIAG :

    Diagnostic Report (1.7.0095.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-6MWFX-W2Y7V-C7M9D
    Windows Product Key Hash: iRjqAcE2WhKCxcn35V2xMB1iOrw=
    Windows Product ID: 55711-640-9771731-23892
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {3C7A66F4-A34E-4339-80B0-07A0754925AB}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-282-800706ba_025D1FF3-170-800706ba_025D1FF3-171-1_025D1FF3-445-80004005_025D1FF3-178-80004005_025D1FF3-179-2_025D1FF3-199-3_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: Yes
    Version: 1.7.18.7
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office XP Professional avec FrontPage - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-282-800706ba_025D1FF3-170-800706ba_025D1FF3-171-1_025D1FF3-445-80004005_025D1FF3-178-80004005_025D1FF3-179-2_025D1FF3-199-3_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005_B4D0AA8B-1029-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\licdll.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\ntdll.dll[5.1.2600.2180]
    File Mismatch: C:\WINDOWS\system32\kernel32.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\crypt32.dll[5.131.2600.5512]
    File Mismatch: C:\WINDOWS\system32\advapi32.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5512]
    File Mismatch: C:\WINDOWS\system32\oembios.bin[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\oembios.dat[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\oembios.sig[hr = 0x80070714]
    File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{3C7A66F4-A34E-4339-80B0-07A0754925AB}</UGUID><Version>1.7.0095.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-C7M9D</PKey><PID>55711-640-9771731-23892</PID><PIDType>1</PIDType><SID>S-1-5-21-299502267-1563985344-725345543</SID><SYSTEM/><BIOS/><HWID>2B0130570184AE7F</HWID><UserLCID>080C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Paris, Madrid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>2</stat><msppid></msppid><name>Windows XP Pro [Corporate] Coccinelle</name><model>Edition Métamorphose</model></SBID><OEM/><BRT/></MachineData>   <Software><Office><Result>100</Result><Products><Product GUID="{9028040C-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Professional avec FrontPage</Name><Ver>10</Ver><Val>8427005CC4BE88A</Val><Hash>qAa9Blp1+qtu/0KizA2P05cRabQ=</Hash><Pid>54865-640-0215733-17484</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="10" Result="100"/><App Id="16" Version="10" Result="100"/><App Id="17" Version="10" Result="100"/><App Id="18" Version="10" Result="100"/><App Id="1A" Version="10" Result="100"/><App Id="1B" Version="10"
    Result="100"/></Applications></Office></Software></GenuineResults> 

    Prior partition 2 validation, both partitions were usable (partition 2 was in 30 day's grace period)
    When I've validated the first partition online with the same key, I did not do anything on partition 2 and it was immediately again usable. 

    Thank you for your explanation. I'd like to erase the first partition and replace it with Linux so it could invalidate again partition 2.

    Yves
     


    • Marked as answer by RickImAPC Friday, August 22, 2008 8:31 PM
    Friday, August 22, 2008 6:40 PM
  • Diagnostic Report (1.9.0011.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Geographically blocked PID
    Validation Code: 13

    Cached Validation Code: N/A
    Windows Product Key: *****-*****-2487J-KWKMF-RPWBY
    Windows Product Key Hash: A6tqZpYlrSkfmUWcaNDswSdRpOo=
    Windows Product ID: 55274-640-8834005-23401
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {E7DA8203-8433-4C5B-A40F-A4C7FAE7F63E}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.40.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 13
    File Exists: Yes
    Version: 1.9.40.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E7DA8203-8433-4C5B-A40F-A4C7FAE7F63E}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-RPWBY</PKey><PID>55274-640-8834005-23401</PID><PIDType>1</PIDType><SID>S-1-5-21-1220945662-746137067-854245398</SID><SYSTEM><Manufacturer>VIA Technologies, Inc.</Manufacturer><Model>KT400-8235</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="2"/><Date>20031007000000.000000+000</Date></BIOS><HWID>E31E3BCF0184207B</HWID><UserLCID>040F</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: no
    Marker string from BIOS: N/A
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A


    I've had this on my computer for nearly a year and I only started getting this yesterday. And as far as I know I got the proper key and did everything properly and did not use a copy or a stolen key. It was all sealed up when I got my CD with the product key so why is it giving me trouble now!
    Sunday, August 30, 2009 12:09 PM