Why am I getting the "You May Be A Victim Of Software Counterfitting" message? RRS feed

  • Question

  • I bought this computer from a local repair shop about 4 months ago and everything was fine then all of a sudden i get that message that my copy of windows is not genuine. I've since talked to the guys that sold me the computer and they sais it was a virus thats going around and they could fix it. Now i've noticed that the OS does not match whats on the CoA. I'm running XP Pro and the CoA says home edition. I got no windows CD with the computer and now I'm thinking i got ripped off, because i didnt know what to look for. I seen in another post that the key of my OS is one that is widely pirated and im really mad now. what should i do? i mean i do have a Coa on my computer so i'm not sure on what to do.

    Here is the report.....

    Diagnostic Report (1.9.0011.0):


    WGA Data-->

    Validation Status: Geographically blocked PID

    Validation Code: 13


    Cached Validation Code: N/A

    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J

    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=

    Windows Product ID: 76487-640-8365391-23309

    Windows Product ID Type: 1

    Windows License Type: Volume

    Windows OS version: 5.1.2600.2.00010100.3.0.pro

    ID: {912A6C52-7D35-4A4C-953D-36E7ABE118B3}(3)

    Is Admin: Yes

    TestCab: 0x0

    WGA Version: Registered,

    Signed By: Microsoft

    Product Name: N/A

    Architecture: N/A

    Build lab: N/A

    TTS Error: N/A

    Validation Diagnostic: 025D1FF3-230-1

    Resolution Status: N/A


    WgaER Data-->

    ThreatID(s): N/A

    Version: N/A


    WGA Notifications Data-->

    Cached Result: 13

    File Exists: Yes


    WgaTray.exe Signed By: Microsoft

    WgaLogon.dll Signed By: Microsoft


    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002


    OGA Data-->

    Office Status: 114 Blocked VLK 2

    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-230-1


    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed


    File Scan Data-->


    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{912A6C52-7D35-4A4C-953D-36E7ABE118B3}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VPK3J</PKey><PID>76487-640-8365391-23309</PID><PIDType>1</PIDType><SID>S-1-5-21-790525478-688789844-682003330</SID><SYSTEM><Manufacturer>NVIDIA</Manufacturer><Model>AWRDACPI</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F4</Version><SMBIOSVersion major="2" minor="3"/><Date>20060918000000.000000+000</Date></BIOS><HWID>60213B3701848076</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version=""/><File Name="WgaLogon.dll" Version=""/></GANotification></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57220</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults> 


    Licensing Data-->



    HWID Data-->



    OEM Activation 1.0 Data-->

    BIOS string matches: yes


    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005


    OEM Activation 2.0 Data-->



    So I guess what I'm asking is since i have the CoA can i get a disk from microsoft and reinstall windows?

    Wednesday, September 2, 2009 7:01 PM


  • Hello mtbonica,

    Right now, your computer has a Volume Licensing edition of XP Pro installed (Line 10), and that installation was done with a now-geographically blocked Volume Licensing Key (VLK) (Line 2).  VLKs are blocked by Microsoft at the request of the original keyholder for such reasons as the key was lost, stolen, compromised, misused, or expired.  Also, MS may have blocked the key if it notices a pattern of misuse, ie, more installations of XP using that key than authorized.

    A geographically blocked key is blocked when it is detected in use outside of the worldwide geographic area(s) covered by its VL Agreement.  The particular Product Key you are using, which ends in 3R89F-D2KXW-VPK3J, is a widely pirated key, and it looks like it recently had a geographic block put on it to try to curb its use, which probably explains why it was showing as Genuine up until recently.  If you search this forum using the search terms "geographically blocked 3R89F-D2KXW-VPK3J" you'll see there are many people who have been victimized by this same situation.

    Also note that the installed license for XP Pro is a Volume License.  As a rule, VL editions of XP should not be sold to individual consumers.  Businesses, schools and gov'ts normally use VL editions for flexibility in installing many computers.  Additionally, VL editions are Upgrade licenses ONLY, and therfore cannot be used as the primary or base license for a computer.

    This is why you were seeing the "software counterfeiting" messages on your computer, because the current installation of XP is an unauthorized installation.

    The same basic problem applies to your installation of Office 2003 Pro.  Please refer to this snippet of your mgadiag report:

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2

    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    The installation of Office is a Volume Licensing edition as well, and the same restriction applies to it:  it should not be sold to individual consumers, and its use is not legal without an accompanying active and valid Volume Licensing agreement with Microsoft.  The VLK used to install this installation of Office is a very widely pirated VLK.

    Does your CoA have a computer manufacturer's name on it or does it have "OEM Product" or "OEM Software" on the second line?

    I expect that it is the latter, OEM Product or OEM Software.  If so, then you can put a genuine installation of XP Home edition onto the computer if you can acquire the correct CD, which would be a systembuilder/OEM/small manufacturer CD for XP Home.  [Note that full retail and upgrade retail CDs will NOT work because they will not accept the Product Key on the CoA; only an OEM CD will accept the PK on the OEM CoA.]  These are genuine hologrammed Microsoft CDs that come with the type of license that's represented by the CoA.  These have "For distribution with a new PC only" printed on the hologram in the upper left quadrant of the CD.  Before you use one of these CDs, verify that it is genuine by checking the setupp.ini file in the \i386 folder of the CD.  Ensure that the last three characters in the Pid=value part of the setupp.ini file are the letters "OEM."

    Microsoft allows registered systembuilder partners to order replacement CDs for free from Microsoft.  If the shop you purchased the computer from is a registered partner, have them go to this password protected link to order a replacement CD:  http://oem.microsoft.com/script/mr/MediaReplacement.aspx

    If they are not registered or refuse to help, you can order the media yourself at cost.  Go to this MS KB article http://support.microsoft.com/default.aspx/kb/326246 and scroll down to this section "Media replacement for users of system builders' computers" and click the link for your region to begin the ordering process.

    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Wednesday, September 2, 2009 9:56 PM