locked
Add or Remove Programs shows "Check Windows Geniunie" (not Genuine) RRS feed

  • Question

  • Is this a Microsoft mis-spelling, or is something hiding on my computer ?
    I have "Googled" the mis-spelling, and there seems to be a number of people out there who genuinely can't spell, but no one else seems to have raised this question. I tried a search on the Microsoft search engine, but that found no appearances of this word. Anyone else have this in their Add or Remove Programs ???
    • Moved by JeniferA Thursday, April 16, 2009 4:14 AM Issues with GA on an XP machine
    Wednesday, April 15, 2009 8:54 AM

Answers

  • Good Morning Kelvin,


    Thank you for providing us with the results from your MGA Diagnostic Tool. Based on what I have analyzed your Windows XP Professional is genuine. I would like for you to call 1(866)-727-2338. Ask them if they have a local UK number for assistance. Right now I am leaning towards the possibility you may be infected with malware. First I recommed you to back up all of your critical data ASAP. Next if you like try and uninstall the uninstall.xml file. At this point I would recommend for you to reformat  the hard drive and re-install Windows and all other programs. Before putting all of your files back on the computer I would use an anti-virus program and scan them a couple times to ensure the files are not infected. The messaging which you are receiving in the "Add/Remove" programs list I have never seen before.


    Take care Kelvin,


    Stephen
    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers. Thank you, Stephen Holm
    • Marked as answer by Stephen Holm Thursday, April 16, 2009 5:06 PM
    Thursday, April 16, 2009 5:05 PM

All replies

  • Dear KelvinHarding,
    I haven't heard of this issue, and neither has my contact in Support. Some questions/suggestions:

    1. Has your computer been exhibiting strange behavior recently that my be indicative of a virus?
    2. Have you virus scanned your computer recently? If not, we suggest running a virus scan. If you do not currently have a virus scan utility, Microsoft provides one (free of charge) at http://safety.live.com.
    3. Please run the MGA Diagnostic utility. Instructions are as follows:

    http://go.microsoft.com/fwlink/?linkid=52012

     

    You will be prompted to either “Run” or “Save” the tool. Choose to “Run” the tool and follow the on-screen prompts. You will receive an “Internet Explorer-Security Warning” dialog box for the “Windows Genuine Advantage Diagnostic Tool”; you must choose to “Run” this tool when prompted.

     

    Once you are presented with the Diagnostics tool choose “Continue” to run the diagnostic report. If the “RESOLVE” button is available after running the diagnostics, please click “RESOLVE” to allow the diagnostic tool to attempt a repair.

     

    1.      After running the MGA Diagnostic tool, click on the “Windows” tab and then click on “Copy”.

    2.      Please return to this post and “Paste” the results here for additional review.



    Regards,
    Jenifer
    Wednesday, April 15, 2009 4:14 PM
  • Hi Jenifer,

    1. No strange behaviour.

    2. I use Avira Premium Security Suite, it updates on a daily basis (I used to be a Windows Live OneCare subscriber until Microsoft decided it could not support anywhere outside the USA...and I spend most of my time in the UK) I scanned the Check Windows Geniunie files (they were in Program Files / Check Windows Geniunie directory).

    3. I have cloned my hard drive using Acronis True Image, then disconnected my main hard-drive, and using the clone I have carried out an uninstall on the Check Windows Geniunie. I then ran an Avira Virus check. No problems.

    4. I then checked your website, got your reply (thank you) and ran your saftey.live.com. scan. It found a few minor registry problems (I also use Auslogics Boost Speed - Registry Checker & Registry Defragmenter, so I didn't expect many), but it did not find any viruses.


    Here is the paste from the diagnostics tool

    Diagnostic Report (1.9.0006.1):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-4JRY3-2772T-T2DYK
    Windows Product Key Hash: xjQIkwaaPHe58wF4m8VyfOkOgM4=
    Windows Product ID: 55276-012-2670114-22735
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {9E08D69B-9C91-4D4F-96B5-C21A7E8867E1}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 0
    File Exists: Yes
    Version: 1.7.18.7
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Edition 2003 - 100 Genuine
    OGA Version: Registered, 1.6.28.0
    Signed By: Microsoft
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_7E90FEE8-169-80004005_B4D0AA8B-587-80004005_025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{9E08D69B-9C91-4D4F-96B5-C21A7E8867E1}</UGUID><Version>1.9.0006.1</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T2DYK</PKey><PID>55276-012-2670114-22735</PID><PIDType>5</PIDType><SID>S-1-5-21-1757981266-1275210071-839522115</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS P5N32-E SLI ACPI BIOS Revision 1201</Version><SMBIOSVersion major="2" minor="4"/><Date>20070706000000.000000+000</Date></BIOS><HWID>89573DEF01848B7A</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.7.18.7"/><File Name="WgaLogon.dll" Version="1.7.18.7"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91E30409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>8560D548C185DA2</Val><Hash>XBrYdAXuI5A5yGnk7QZcfHCqHW8=</Hash><Pid>73931-721-3694312-57585</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="11" Result="100"/><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/><App Id="44" Version="11" Result="100"/><App Id="A1" Version="11" Result="100"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: no
    Marker string from BIOS: N/A
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A

    There is a wealth of history to my computer, originally heavily upgraded from a Pentium 4 to Core2Duo, to Core2Quad. Started out on Windows XP Pro (Retail), then up(?)graded to Vista Ultimate (OEM), then due to a catastrophic failure on Vista, down(?)graded back to my XP Pro, which it is currently running. I am looking forward to Windows 7 which is getting rave reviews. I may yet use Vista on my Media Centre PC which is running XP Media Centre 2005 (OEM, obviously), when I drop a new motherboard and my old Core2Duo in to it...

    Genuine - Licencing - do not even go there. I started out on MS DOS, then Windows 2, 3, WFWG, 5, 95, 98, ME, 2000 etc. Owned all of them (re-installed most of them several times) ! Still got the floppys.

    Let me know if you want to see the uninstall.xml from the Check Windows Geniunie files, it scared the ____ out of me, but it is still available from the original main drive...

    ?can't even use the word h*ll ?

    Regards

    Kelvin

    Wednesday, April 15, 2009 10:17 PM
  • Hi Kelvin,
    Thank you for the very detailed information. I am moving your thread over to the forum for Windows XP for further assistance.

    Regards,
    Jenifer
    Thursday, April 16, 2009 4:14 AM
  • Jenifer,

    Sorry to be dumb, but where, specifically, did you move the thread to ? I click on my threads, and it brings me back here ! I looked on the only XP forum I could find (SP3), and it's not there...

    Regards

    Kelvin
    Thursday, April 16, 2009 8:34 AM
  • Good Morning Kelvin,


    Thank you for providing us with the results from your MGA Diagnostic Tool. Based on what I have analyzed your Windows XP Professional is genuine. I would like for you to call 1(866)-727-2338. Ask them if they have a local UK number for assistance. Right now I am leaning towards the possibility you may be infected with malware. First I recommed you to back up all of your critical data ASAP. Next if you like try and uninstall the uninstall.xml file. At this point I would recommend for you to reformat  the hard drive and re-install Windows and all other programs. Before putting all of your files back on the computer I would use an anti-virus program and scan them a couple times to ensure the files are not infected. The messaging which you are receiving in the "Add/Remove" programs list I have never seen before.


    Take care Kelvin,


    Stephen
    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers. Thank you, Stephen Holm
    • Marked as answer by Stephen Holm Thursday, April 16, 2009 5:06 PM
    Thursday, April 16, 2009 5:05 PM