locked
Genuine XP but didn't Pass the WGA ? RRS feed

  • Question

  • I had a genuine XP Home edition and so far I have never faced any problem until recently two months ago, my computer starting to act a bit weird (hidden files cant be shown, even though I have checked them in folder options and several files kept regenerating themselves*)

    therefore, I started to try to solve things myself, by deleting some of the files which I suspect is a virus because they kept making changes to other applications' registry keys & dll.

    however, recently, for two days ago, as usual I get the option to update my windows, and I am shocked to learn that now my windows is diagnosed as counterfeit ?

    *the files that I have deleted and kept showing up are these 6 files (highlighted in blue)
    ** when i opened certain application (adobe reader, photoshop, etc ) message no. 1 & no. 2 showed up

    My questions are
    1. Did the file that I have deleted are windows' components ?
    if yes, then could you have some explanation as why did these filees kept reappearing and seems multiplicating into other application dll ? and also why I cant change the settings in my folder option ? (show hidden files, etc)

    1. Based on the answer for number 1, why should I do to get a genuine diagnose, as I own the original cd and serial number of the xp

    as for the note, my antivirus is kaspersky internet security and it doenst seems to catch any abnormalities thus I decide to delete the files manually, by using CCleaner



    Cheers,
    Patty
    Wednesday, March 4, 2009 6:34 PM

Answers

  •  Hello :-)

    Thank you for visiting the Windows Genuine Advantage (WGA) program forum. I understand the inconvenience you are currently experiencing. We have seen numerous issues from customers who were provided a Volume License Key (VLK) on their computer that has either been blocked by Microsoft or generated by a fake product key code generator "Keygen". WGA currently provides checks for these types of product keys and prompts the user to notify them of this situation. More invalid product keys are being identified daily and WGA is constantly refreshing its database with these newly identified product keys and immediately blocks them. 

    Right now, your computer has a Keygen'd Volume edition of Windows XP Professional and Volume License (VL) edition of Office XP Professional 2003 identified. Below is an extract taken from the MGA Diagnostic results you provided to us:

    WGA Data-->
    Validation Status: Invalid Product Key


    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1



    As a rule, VL editions should not be sold to individual consumers. Businesses, schools and governments normally use VL editions for flexibility in installing many computers Also, Volume Licenses for Windows XP is Upgrade licenses ONLY and cannot be used as the original or base license for a new computer.  Jars of Clay please ask your systems administrator to logon to the eOpen site (https://eopen.microsoft.com/EN/default.asp) and confirm what your company’s assigned VLK. Your systems administrator should be able to provide you with solution to what you are experiencing and answer your questions. If your computer is not part of a corporate connection then I would file a piracy report by visiting http://www.microsoft.com/piracy


    Should you feel there are virus's please call our PC Safety line at 1-866-PCSAFETY or 1 (866) 727-2338.  This phone number is for virus and other security-related support free of charge. It is available 24 hours a day for the U.S. and Canada.

    Detailed information including selecting various regions for support can be located at:

    http://support.microsoft.com/common/international.aspx?rdpath=4



    Take care,

    Stephen


    Stephen Holm
    • Marked as answer by Stephen Holm Wednesday, March 4, 2009 7:17 PM
    Wednesday, March 4, 2009 7:17 PM

All replies

  • Hello Jars of Clay,

    We understand the inconvenience you are currently experiencing and would like to provide you with some self-help options we have made available for our customers. Please follow the steps outlined below as it could either resolve your issue or, if need be, provide us with additional information to determine the cause of this issue.

     

    1.      Ensure you log onto the computer experiencing the issue with “Administrator” rights.

    2.      Next we would like to confirm that you are running the most current version of the Genuine Advantage control on your computer. In order to do this please follow the below link and choose the “Validate Windows” option.

     

    http://www.microsoft.com/genuine

    If the above steps did not resolve your issue lets continue with the steps below.

    If you could also please follow the steps outlined below, the diagnostics Web Site will attempt to resolve the validation errors you are experiencing with Windows.

    http://www.microsoft.com/Genuine/diag/RunDiags.aspx?displayLang=en

    Next follow the on-screen prompts to resolve the issue if any of the checks at the above site fail. If, after attempting to resolve the issue as per the instructions on the above site fails, please refer to the link below and run the MGA Diagnostics tool:

     

    http://go.microsoft.com/fwlink/?linkid=52012

     

    You will be prompted to either “Run” or “Save” the tool. Choose to “Run” the tool and follow the on-screen prompts. You will receive an “Internet Explorer-Security Warning” dialog box for the “Windows Genuine Advantage Diagnostic Tool”; you must choose to “Run” this tool when prompted.

     

    Once you are presented with the Diagnostics tool choose “Continue” to run the diagnostic report. If the “RESOLVE” button is available after running the diagnostics, please click “RESOLVE” to allow the diagnostic tool to attempt a repair.

     

    1.      After running the MGA Diagnostic tool, click on the “Windows” tab and then click on “Copy”.

    2.      Please return to this post and “Paste” the results here for additional review.

     

    Step 2 is to look on the computer itself, in the documentation you received with the computer or with your retail purchase of Windows to see if you have a Certificate of Authenticity (COA).  If you have one, tell us about the COA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or Media Center, or another version of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the Product Key.

    Not sure what to look for?  See this page for reference:  http://www.microsoft.com/resources/howtotell/en/coa.mspx

     

    NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.

     

    Thank you,
    Stephen


    Stephen Holm
    Wednesday, March 4, 2009 6:45 PM
  • Stephen,
    thank you for the reply, as per now I already tried the step 1 to 3 :

    1. step 1 is actually happened 2 days ago, which when I get the notification that my windows is considered as counterfeit
    2. for step 2, the results are :

    Microsoft Genuine Advantage Diagnostic Results

    PassedActive scripting allowed
    PassedDisplay images enabled
    PassedComputer time and date correct
    PassedCookies enabled
    PassedPlug-ins enabled
    FailedMicrosoft Genuine Advantage plug-ins are installed and loaded
    PassedOffice validation ActiveX loaded
    PassedValidation Self-help ActiveX loaded
    FailedMicrosoft Genuine Advantage plug-ins connect with Microsoft validation servers

    3. for step 3

    Diagnostic Report (1.9.0006.1):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid Product Key
    Validation Code: 8
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-B4BYX-73KJP-KM3K3
    Windows Product Key Hash: AXcniATm6fFm1z/+0WehlE2h8IU=
    Windows Product ID: 55274-640-7712297-23595
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    ID: {36FD7ECD-7DAF-4826-88FA-2ED71FBA64D4}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.9.1
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 8
    File Exists: Yes
    Version: 1.8.31.9
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{36FD7ECD-7DAF-4826-88FA-2ED71FBA64D4}</UGUID><Version>1.9.0006.1</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-KM3K3</PKey><PID>55274-640-7712297-23595</PID><PIDType>1</PIDType><SID>S-1-5-21-1214440339-2077806209-1417001333</SID><SYSTEM><Manufacturer>AWARD_</Manufacturer><Model>AWRDACPI</Model></SYSTEM><BIOS/><HWID>0EE0365701844E63</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.8.31.9"/><File Name="WgaLogon.dll" Version="1.8.31.9"/></GANotification></MachineData>      <Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57340</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: no
    Marker string from BIOS: N/A
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A


    and lastly, yes I do has a COA
    1. it's a Windows XP Home Edition
    2. OEM Software
    3. nope, it doesnt because I bought the copy separately from my PC

    and terribly sorry, that I posted the question twice, however in my another post, there's a screen cap of the items and message that mentioned in post#1

    Wednesday, March 4, 2009 7:00 PM
  •  Hello :-)

    Thank you for visiting the Windows Genuine Advantage (WGA) program forum. I understand the inconvenience you are currently experiencing. We have seen numerous issues from customers who were provided a Volume License Key (VLK) on their computer that has either been blocked by Microsoft or generated by a fake product key code generator "Keygen". WGA currently provides checks for these types of product keys and prompts the user to notify them of this situation. More invalid product keys are being identified daily and WGA is constantly refreshing its database with these newly identified product keys and immediately blocks them. 

    Right now, your computer has a Keygen'd Volume edition of Windows XP Professional and Volume License (VL) edition of Office XP Professional 2003 identified. Below is an extract taken from the MGA Diagnostic results you provided to us:

    WGA Data-->
    Validation Status: Invalid Product Key


    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1



    As a rule, VL editions should not be sold to individual consumers. Businesses, schools and governments normally use VL editions for flexibility in installing many computers Also, Volume Licenses for Windows XP is Upgrade licenses ONLY and cannot be used as the original or base license for a new computer.  Jars of Clay please ask your systems administrator to logon to the eOpen site (https://eopen.microsoft.com/EN/default.asp) and confirm what your company’s assigned VLK. Your systems administrator should be able to provide you with solution to what you are experiencing and answer your questions. If your computer is not part of a corporate connection then I would file a piracy report by visiting http://www.microsoft.com/piracy


    Should you feel there are virus's please call our PC Safety line at 1-866-PCSAFETY or 1 (866) 727-2338.  This phone number is for virus and other security-related support free of charge. It is available 24 hours a day for the U.S. and Canada.

    Detailed information including selecting various regions for support can be located at:

    http://support.microsoft.com/common/international.aspx?rdpath=4



    Take care,

    Stephen


    Stephen Holm
    • Marked as answer by Stephen Holm Wednesday, March 4, 2009 7:17 PM
    Wednesday, March 4, 2009 7:17 PM
  • Stephen,

    so based on the analysis, the problem that affecting my windows is actually caused by the microsoft office ?

    Cause right now, it seems that the analysis is contradicting what I posted before that the XP that I am using currently is a home edition and when I read the product key listed in the diagnostic tool,
    it doesnt match the key that I am holding currently.

    As for microsoft office itself, was installed by the shop which helped me to reformat & reinstall the XP
    Wednesday, March 4, 2009 7:29 PM
  • Hello Jars of Clay,

    No the problem isn't based on Microsoft Office. As I mentioned, "Right now, your computer has a Keygen'd Volume edition of Windows XP Professional". I provide you with additional information regarding Office after I analyzed your MGA Diagnostic Results. If you read line 6 of my previous post it indicates Windows was installed with a Keygen'd key and then the additional information about office. 


    Hopefully I was able to clarify this for you. Should you need further assistance please post back :-).


    Take care


    Stephen
    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers. Thank you, Stephen Holm
    Thursday, March 5, 2009 11:35 PM
  • Stephen,

    does this part of Diagnostic Tools shows the real product key of my windows ?

    Windows Product Key: *****-*****-B4BYX-73KJP-KM3K3



    Because it didn't match the product key that I have in hand.



    If it yes, then doesn't it mean that somehow my windows is being registered with a wrong key ?

    Please tell me how to fix this particular problem, because my main concern now is my windows login that being plastered by a message to "resolve now", thank you.
    Friday, March 6, 2009 6:56 AM
  • JarsofClay,

    Your situation is not all that uncommon.

    You took your computer to a shop that helped you reformat and reinstall XP.  However, the shop did not use your XP Home CD and Product Key to install XP.  What they used were Volume Licensing CDs for both XP Professional and Office 2003 Professional, and they used an Invalid (produced by a Product Key generating hacker program) Product Key for XP and a blocked Product Key (one that was no doubt posted on the internet) to install Office 2003.

    You may want to return to the shop with a copy of your mgadiag printout and register a complaint with the owner for installing pirated and possibly compromised software onto your computer.

    To remedy the situation you will have to backup and offload your valuable data.  Then, use the genuine hologrammed XP Home CD to do a clean installation of XP Home onto your computer.  After that, visit Windows Updates to fully update your installation of XP Home.  Then reinstall your programs from CD and then restore your data.

    Here's a good tutorial on doing a clean installation:  http://www.michaelstevenstech.com/cleanxpinstall.html

    Good luck!
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Friday, March 6, 2009 4:15 PM