locked
WGA Failed with first time install using new XP Pro OEM CD on a new computer RRS feed

  • Question

  • This was a shrink-wrapped XP Pro OEM CD with a COA. Please help me figure out why this is not passing WGA.

    Diagnostic Report (1.9.0011.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid Product Key
    Validation Code: 8

    Cached Validation Code: N/A
    Windows Product Key: *****-*****-C6YWR-2JQ8T-WPH3Y
    Windows Product Key Hash: VX5+K+jg+SgpueiZK1cR8A+TALw=
    Windows Product ID: 76487-640-2481922-23640
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {BAADF2FB-5C24-464B-85E7-94653A961130}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.40.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 8
    File Exists: Yes
    Version: 1.9.40.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BAADF2FB-5C24-464B-85E7-94653A961130}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WPH3Y</PKey><PID>76487-640-2481922-23640</PID><PIDType>1</PIDType><SID>S-1-5-21-1993962763-813497703-682003330</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>GA-MA785G-UD3H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F4</Version><SMBIOSVersion major="2" minor="4"/><Date>20090916000000.000000+000</Date></BIOS><HWID>2257338F01844074</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>48D6F409925E6D4</Val><Hash>okTMyk+0t3MEVt8Vk73dFJFswAo=</Hash><Pid>81599-874-9708443-65928</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: yes
    Marker string from BIOS: 14910:SYNNEX TECHNOLOGY INTERNATIONAL CORP|14910:SYNNEX TECHNOLOGY INTERNATIONAL CORP|14910:SYNNEX TECHNOLOGY INTERNATIONAL CORP
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A

     

    Tuesday, November 3, 2009 3:34 PM

Answers

  • Hello The B_man,

    Based on the CD not having OEM in the setupp.ini file, and having a thin label vs an embedded hologram, and the product key on the CoA matching an invalid product key, it's pretty much a slam-dunk that the product you acquired is a high-quality counterfeit.

    Remember, your first option is to go back to the seller and demand a refund.  If you purchased the kit on an online auction site, the site's procedures may require certain actions to get authorization to send the item back for a refund.  Feedback from buyers who have been sent bad merchandise is an essential part of how a typical autction site polices its participants.  Don't forget that if you paid with a credit card you may have additional consumer protections thru the credit card company.

    To answer your specific questions:

    1.  The FAQ says to allow 4-6 weeks for processing.  Some posters have told us that they have received their replacements in as little as 2-3 weeks, though.

    2.  Your replacement will be for the same XP as what you sent in, which is XP Pro, so you will get a full retail license for XP Pro.  You would be able to use the product key updater utility http://go.microsoft.com/fwlink/?linkid=45668 to change your current nongenuine installation to genuine using the product key that comes with the replacement.  However, this is not recommended, because there is really no way to know what kind of malicious software got installed by using the counterfeit disc.  A clean installation (repartition and reformat) using the genuine replacement CD is the best way to ensure a malware free, stable installation of Windows.

    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Wednesday, November 4, 2009 8:55 PM
    Tuesday, November 3, 2009 6:10 PM

All replies

  • Hello The_Bman,

    Here is a snippet of your mgadiag report:

    WGA Data-->
    Validation Status: Invalid Product Key
    Validation Code: 8

    Cached Validation Code: N/A
    Windows Product Key: *****-*****-C6YWR-2JQ8T-WPH3Y
    Windows Product Key Hash: VX5+K+jg+SgpueiZK1cR8A+TALw=
    Windows Product ID: 76487-640-2481922-23640
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {BAADF2FB-5C24-464B-85E7-94653A961130}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.40.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    Your XP Pro OEM licensing kit, which is trying to look like a genuine XP Pro OEM CD and CoA, actually installed a nongenuine volume licensing edition of XP Pro.

    Things to check:
    The last three groups of characters of the installed product key are:  C6YWR-2JQ8T-WPH3Y
    If these same last three groups of characters are printed on the CoA, the CoA is likely a counterfeit.

    Navigate to the \i386 folder on the CD and look for the setupp.ini file.  It is a small text file with two sections.  The second section of the file has a line that reads Pid= and then some numbers and letters.  A real OEM CD would have the last three characters on this line as "OEM".  If yours does not, the CD is likely a counterfeit.

    Have a close look at the hologram label of the CD.  Is the label a thin label affixed to the top surface of the CD or is it embeded within the plastic of the CD?  The real CD has the hologram embedded within the CD.  If yours has a label on the top, it's likely a counterfeit.

    In the upper left quadrant, does the CD read, "For distribution with a new PC.  For product support contact the manufacturer of your PC" or something similar?

    Your first course of action is to confront your seller with this info and demand a full refund.  If no joy, report seller to whomever you can, and pursue a refund thru the selling venue or thru your payment method.

    Also, you might qualify to have your materials replaced by Microsoft for free if they are deemed to be high quality counterfeits.  Please see the FAQ here:  http://www.microsoft.com/genuine/downloads/FAQ.aspx?displaylang=en&sGuid=669ed086-d41a-44ab-94a0-eb82ea2419f3#ID0EFIAC

    If you want to participate in the Windows Genuine Offer, please click on the Learn More Online link that you should be seeing in the nongenuine Windows notifications on your screen.


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Tuesday, November 3, 2009 4:32 PM
  • The last 3 groups of characters match what's printed on the COA, but I'm curious as to why this makes it likely counterfeit. I would have thought the keys *should* match.

    I also checked the setupp.ini and the Pid value did not have any letters at the end. Just a string of numbers.

    I went through the various hologram / CD tests on the howtotell web site and could not notice any certain differences. However, your note about whether the hologram appears to be a thin label vs. embedded on the CD was helpful. It does appear to be a thin label and not embedded. Even so, it's still very hard to tell. This must be one high quality counterfeit.

    If these pieces of information confirm it is counterfeit, then I'd like to ask more questions about the free replacement (since this seems to meet the criteria).

    1) How long does it take to get a replacement CD / key?
    2) Will I have to completely reinstall XP or can I just update the key?

    I am building this PC for a family member and they are supposed to pick it up in less than 2 weeks.

    Thanks for your help.
    Tuesday, November 3, 2009 4:59 PM
  • Hello The B_man,

    Based on the CD not having OEM in the setupp.ini file, and having a thin label vs an embedded hologram, and the product key on the CoA matching an invalid product key, it's pretty much a slam-dunk that the product you acquired is a high-quality counterfeit.

    Remember, your first option is to go back to the seller and demand a refund.  If you purchased the kit on an online auction site, the site's procedures may require certain actions to get authorization to send the item back for a refund.  Feedback from buyers who have been sent bad merchandise is an essential part of how a typical autction site polices its participants.  Don't forget that if you paid with a credit card you may have additional consumer protections thru the credit card company.

    To answer your specific questions:

    1.  The FAQ says to allow 4-6 weeks for processing.  Some posters have told us that they have received their replacements in as little as 2-3 weeks, though.

    2.  Your replacement will be for the same XP as what you sent in, which is XP Pro, so you will get a full retail license for XP Pro.  You would be able to use the product key updater utility http://go.microsoft.com/fwlink/?linkid=45668 to change your current nongenuine installation to genuine using the product key that comes with the replacement.  However, this is not recommended, because there is really no way to know what kind of malicious software got installed by using the counterfeit disc.  A clean installation (repartition and reformat) using the genuine replacement CD is the best way to ensure a malware free, stable installation of Windows.

    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Wednesday, November 4, 2009 8:55 PM
    Tuesday, November 3, 2009 6:10 PM
  • Thanks, Dan. You've been a big help. In reading the FAQs about the Product Key Updater utility, it says that the utility scans all of the key Windows files to ensure they are legit and to help you determine if you need a clean install. It sounds like you are saying this is not a foolproof scan.

    I have been weighing several options:

    1) Get refund from seller and purchase an OEM copy from a retailer (e.g. Newegg) -- 1 wk + addt'l cost
    2) Get refund from seller and purchase WGA kit from Microsoft -- instant key + 4-6 wks for CD + addt'l cost
    3) Allow seller to send replacement CD and key that validate as authentic -- 1 wk but won't know if legit until install
    4) Send high quality counterfeit disc to Microsoft for free WGA kit -- 4-6 wks

    I'm in a bit of a time crunch as I was building this new PC for a family member who is traveling to pick it up from me next weekend (11/15). So I'm leaning towards option 1.

    Any thoughts or options I missed?

    Thanks again.
    Wednesday, November 4, 2009 2:20 PM
  • Thanks, Dan. You've been a big help. In reading the FAQs about the Product Key Updater utility, it says that the utility scans all of the key Windows files to ensure they are legit and to help you determine if you need a clean install. It sounds like you are saying this is not a foolproof scan.

    It can only scan the files it knows should be there. If the pirates added a folder filled with Malware set to launch at boot, how would the Update Tool know? it's not an anti-virus scanner. It just checks that the Windows files are all good. 

    Thank you,
    Darin MS
    Wednesday, November 4, 2009 8:51 PM
  • Hello The_Bman,

    Do you have any Windows XP computers around the house with a full retail license?

    If so, use that computer as a "donor" and install that license on the relative's computer.  Retail licenses can be moved from one computer to another, and if the license has been on that computer for a while, I would expect that it would activate and validate just fine on the relative's newly built computer, and that the two computers will go along for quite some time without running afoul of the product activation or validation systems---the systems are not designed to that tight of a standard, so a little double dipping for a few weeks should fly under the radar.

    Submit for the complimentary replacement.

    The compl will come back as a retail license.  Use the product key that came with the complimentary replacement, and the product key updater utility http://go.microsoft.com/fwlink/?linkid=45668 , and change the product key on your "donor" XP computer to the product key that came with the complimentary replacement.

    I got a $1 dollar bill that says that'll work!  :-)
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Wednesday, November 4, 2009 11:45 PM