Answered by:
Windows Validation-Geographically blocked PID

Question
-
Hi there,
I bought my laptop with a genuine windows xp but after about 2months, I got the message illegal system DLL relocation anytime I try opening one of windows applications e.g calculator. The full msg is "The system DLL user32.dll was relocated in memory. The application will not run properly. The relocation occurred because the DLL C:\WINDOW\system32\SHELL32.dll occupied an address range reserved for Windows system DLLS. The vendor supplyin gthe DLL should be contacted for a new DLL."
I also performed a windows validation test but got below results. Can you pls help.
Diagnostic Report (1.9.0006.1):
-----------------------------------------
WGA Data-->
Validation Status: Geographically blocked PID
Validation Code: 13
Online Validation Code: N/A
Cached Validation Code: N/A
Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
Windows Product ID: 55274-640-8365391-23781
Windows Product ID Type: 1
Windows License Type: Volume
Windows OS version: 5.1.2600.2.00010100.3.0.pro
ID: {E029BD7F-320B-4C8C-9A33-8AD9254AE41B}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.9.40.0
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-230-1
Resolution Status: N/AWgaER Data-->
ThreatID(s): N/A
Version: N/AWGA Notifications Data-->
Cached Result: 13
File Exists: Yes
Version: 1.9.40.0
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: MicrosoftOGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGATray.exe Signed By: Microsoft
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 103 Blocked VLK
Microsoft Office Professional Plus 2007 - 103 Blocked VLK
OGA Version: Registered, 1.6.28.0
Signed By: Microsoft
Office Diagnostics: 025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{E029BD7F-320B-4C8C-9A33-8AD9254AE41B}</UGUID><Version>1.9.0006.1</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VPK3J</PKey><PID>55274-640-8365391-23781</PID><PIDType>1</PIDType><SID>S-1-5-21-448539723-1993962763-1417001333</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VGN-FS515B</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>R0040J2</Version><SMBIOSVersion major="2" minor="34"/><Date>20060308000000.000000+000</Date></BIOS><HWID>832C3407018400E2</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>1</stat><msppid></msppid><name>LiLDuDe</name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>C0A25836FDBE5AC</Val><Hash>FmDbcrRY1pTOcrz4ZUZRHhpUuc0=</Hash><Pid>89409-726-2958074-65350</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>Licensing Data-->
N/AHWID Data-->
N/AOEM Activation 1.0 Data-->
BIOS string matches: yes
Marker string from BIOS: 1FF90:Sony Corporation|1FF90:Sony Corporation ITCNC
Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005OEM Activation 2.0 Data-->
N/A- Edited by shei_t Wednesday, June 24, 2009 10:09 PM
- Moved by Carey FrischMVP, Editor Thursday, June 25, 2009 3:01 PM Moved to proper category. (From:Feedback and Comments)
Wednesday, June 24, 2009 10:08 PM
Answers
-
Hello shei_t,
Right now, your computer has a Volume Licensing edition of XP Pro installed (Line 10), and that installation was done with a now-geographically blocked Volume Licensing Key (VLK) (Line 2). VLKs are blocked by Microsoft at the request of the original key holder for such reasons as the key was lost, stolen, compromised, misused, or expired. Also, Microsoft may have blocked the key if it notices a pattern of misuse, i.e., more installations of XP using that key than authorized.
A geographically blocked key is blocked when it is detected in use outside of the worldwide geographic area(s) covered by its Volume Licensing Agreement. The particular Product Key you are using, which ends in 3R89F-D2KXW-VPK3J, is a widely used pirated key that comes up as very popular if you do a search for it on the internet, and it looks like it recently (March 2009) had a geographic block put on it to try to curb its use, which probably explains why it was showing as Genuine up until recently.As a rule, VL editions of XP should not be sold to individual consumers. Businesses, schools and governments normally use VL editions for flexibility in installing many computers. Additionally, VL editions are Upgrade licenses ONLY, and therefore cannot be used as the primary or base license for a computer. If you are an individual consumer using a privately owned computer, you certainly should not be using a Volume License.
This is why you were seeing the "software counterfeiting" messages on your computer, because the current installation of XP is an unauthorized installation. I would recommend for you to file a piracy report by visiting http://www.microsoft.com/piracy .
Look on the computer or in the materials that came with your computer to see if you have a Certificate of Authenticity (CoA). If you have one, tell us about the CoA. Tell us:
1. What edition of Windows XP is it for, Home, Pro, or another version or edition of Windows?
2. Does it read "OEM Software" or "OEM Product" in black lettering?
3. Or, does it have the computer manufacturer's name in black lettering?
4. DO NOT post the Product Key that may be printed on the CoA.
5. Windows XP purchased in retail packaging will have the CoA on the retail package box top, and will have the Product Key on a yellow-orange label affixed to the CD holder folder inside the box.
Not sure what to look for? Click here: http://www.microsoft.com/resources/howtotell/en/coa.mspx
As for your "illegal system DLL relocation" issue, it doesn't appear to be Activation or Validation related and would be outside my area of knowledge. I recommend posting in the XP Newsgroup at http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspxThank you,
Darin MS- Marked as answer by Darin Smith MS Thursday, June 25, 2009 6:58 PM
Thursday, June 25, 2009 6:58 PM