Answered by:
Clever Office Counterfeits

Question
-
Howdy,
I've come across users who have counterfeit versions of Office 2003 Standard.
The counterfeits are pretty clever and even defeat the MS Validation system. One is adapted from a Chinese Office version. Most users could never spot the fakes. Most Office functions work ok, but they fail or behave unpredictably when interfacing with other apps.
How can I quickly spot these counterfeits with certainty?
Please advise.
Thanks
Sly
Here is a report from another version I suspect is counterfeit. Recall these are clever. There are odd subtle behaviors in the Office apps. e.g. A Word product ID fails to appear in Sys Info. The version was purchased and downloaded online.
Diagnostic Report (1.7.0039.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Detailed Status: N/A
Cached / Grace status: N/A, N/A
Windows Product Key: *****-*****-P7HQD-Y3QTT-DYRVJ
Windows Product Key Hash: u7RvFak8TXkguw3Y0TRHZhDCtDE=
Windows Product ID: 76487-OEM-2211906-00319
Windows Product ID Type: 2
CSVLK Server: N/A
CSVLK PID: N/A
Windows License Type: OEM SLP
Windows OS version: 5.1.2600.2.00010100.2.0.tab
ID: {92D28AFA-30CE-4952-8BF4-B987CC8BC4D6}(3)
Is Admin: Yes
Commit / Reboot / BRT: N/A, N/A, N/A
WGA Version: Registered, 1.7.36.0
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-171-1
Resolution Status: N/A
Notifications Data-->
Cached Result: 0
File Exists: Yes
Version: 1.7.18.5
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: Microsoft
OGA Data-->
Office Status: 100 Genuine
OGA Version: Registered, 1.6.21.0
Signed By: Microsoft
Office Diagnostics: 025D1FF3-171-1
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Allowed
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{92D28AFA-30CE-4952-8BF4-B987CC8BC4D6}</UGUID><Version>1.7.0039.0</Version><OS>5.1.2600.2.00010100.2.0.tab</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-DYRVJ</PKey><PID>76487-OEM-2211906-00319</PID><PIDType>2</PIDType><SID>S-1-5-21-747601788-2392194371-4227386227</SID><SYSTEM><Manufacturer>Gateway </Manufacturer><Model>M275 </Model></SYSTEM><BIOS><Manufacturer>Gateway</Manufacturer><Version>48.02.03</Version><SMBIOSVersion major="2" minor="31"/><Date>20041005000000.000000+000</Date><SLPBIOS>Gateway,Gateway,Gateway,Gateway</SLPBIOS></BIOS><HWID>31763A07018400D2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>2</stat><msppid></msppid><name>Gateway</name><model>M275</model></SBID><OEM/></MachineData> <Software><Office><Result>100</Result><Products><Product GUID="{91120409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard Edition 2003</Name><Ver>11</Ver><Val>316E34747420DD2</Val><Hash>iPyb5ts81HhzzoUmtRChBWFwgvc=</Hash><Pid>70141-745-7444637-56970</Pid><PidType>1</PidType></Product></Products></Office></Software></GenuineResults>
>1</PidType></Product></Products></Office></Software></GenuineResults>
Sunday, September 23, 2007 5:40 PM
Answers
-
If you run the MGA Diaganostic Utility on the computers in question, a genuine version of Microsoft Office should be noted as:
Office Status: 100 Genuine
<LegitResult>100</LegitResult><Name>Microsoft Office
Sunday, September 23, 2007 7:40 PM -
Hello Fun4Sly,
Windows Genuine Advantage (WGA) is here to help protect YOU, our valued customer. Please submit a piracy report @ the following URL: http://www.microsoft.com/piracy/default.mspx . Microsoft legal will follow up on all leads provided. Submitting piracy reports will assist in stopping unscrupulous business practices. Please review the following site and review some high quality counterfeit discs as illustrated here: http://www.microsoft.com/resources/howtotell/content.aspx?displaylang=en&pg=counterfeit
Thank you,
Stephen Holm, MS
Saturday, September 29, 2007 2:44 AM
All replies
-
If you run the MGA Diaganostic Utility on the computers in question, a genuine version of Microsoft Office should be noted as:
Office Status: 100 Genuine
<LegitResult>100</LegitResult><Name>Microsoft Office
Sunday, September 23, 2007 7:40 PM -
The counterfeiters have figured a work around to it.
This stuff is not real. There is a whole list of issues I haven't included.
I will escalate to MS direct.
Sunday, September 23, 2007 9:58 PM -
That should be very helpfull. Feel free to send me a mail directly and i will make sure it gets its due attentionSunday, September 23, 2007 10:47 PM
-
Will do and will include caps from user machines.
Thx.
PS. Please confirm you are an MS employee.
Monday, September 24, 2007 2:17 AM -
Hello Fun4Sly,
Windows Genuine Advantage (WGA) is here to help protect YOU, our valued customer. Please submit a piracy report @ the following URL: http://www.microsoft.com/piracy/default.mspx . Microsoft legal will follow up on all leads provided. Submitting piracy reports will assist in stopping unscrupulous business practices. Please review the following site and review some high quality counterfeit discs as illustrated here: http://www.microsoft.com/resources/howtotell/content.aspx?displaylang=en&pg=counterfeit
Thank you,
Stephen Holm, MS
Saturday, September 29, 2007 2:44 AM