locked
WGA Validation Problems XP RRS feed

  • Question

  • Hi there, I have a genuine version of Windows XP Professional and have never had any problems getting updates or validation.  I have not reloaded the operation system.  When I booted the computer just now, I got a messages "You may be a victim of software counterfeiting" and  "This copy of Windows did not pass genuine validation". The link then wants me to pay $237.60 for a licence.  I purchased the XP Pro in the box with the MS seal still on it!  I ran the WGA diag tool, these are the results.
    ----------------------------------
    Diagnostic Report (1.9.0011.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Geographically blocked PID
    Validation Code: 13

    Cached Validation Code: N/A
    Windows Product Key: *****-*****-2487J-KWKMF-RPWBY
    Windows Product Key Hash: A6tqZpYlrSkfmUWcaNDswSdRpOo=
    Windows Product ID: 55274-640-8834005-23403
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {838ACC08-3EB2-49EE-821E-C0E2BA3AF89F}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.40.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 13
    File Exists: Yes
    Version: 1.9.40.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{838ACC08-3EB2-49EE-821E-C0E2BA3AF89F}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-RPWBY</PKey><PID>55274-640-8834005-23403</PID><PIDType>1</PIDType><SID>S-1-5-21-1614895754-1767777339-725345543</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1402    </Version><SMBIOSVersion major="2" minor="3"/><Date>20070321000000.000000+000</Date></BIOS><HWID>8F05310F01848077</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65104</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: yes
    Marker string from BIOS: 15220:ASUSTeK Computer Inc|10322:GENUINE C&C INC
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A

    -------------------
    Has anyone got any ideas how I get this "Malware" off my computer?

    Cheers
    Monday, July 13, 2009 4:45 AM

Answers

  • Hello Bob965,

    You purchased a full retail license for XP Pro in the nice pretty retail package.  However, the CD in the package installed a volume licensing edition of XP Pro, and used the now-geographically blocked VLK, instead of installing a full retail license.  The CD itself contains volume licensing bits instead of full retail bits, as evidenced by the last line of te setupp.ini file "Pid=55274270".    The value "270" is used ONLY with Volume Licensing bits.

    Please use the messaging you are seeing from the WGA Notifications Utility to prepare and submit a counterfeit software report so you can send your materials to Microsoft for evaluation and possible complimentary replacement.  The process can take 4-6 weeks.

    Please come back here to let us know how it all turned out.


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Tuesday, July 14, 2009 3:33 AM

All replies

  • Hello Bob965,

    Right now, your computer has a Volume Licensing edition of XP Pro installed (Line 10), and that installation was done with a now-geographically blocked Volume Licensing Key (VLK) (Line 2).  VLKs are blocked by Microsoft at the request of the original key holder for such reasons as the key was lost, stolen, compromised, misused, or expired.  Also, Microsoft may have blocked the key if it notices a pattern of misuse, i.e., more installations of XP using that key than authorized.

    A geographically blocked key is blocked when it is detected in use outside of the worldwide geographic area(s) covered by its VL Agreement. 
    As a rule, VL editions of XP should not be sold to individual consumers.  Businesses, schools and governments normally use VL editions for flexibility in installing many computers.  Additionally, VL editions are Upgrade licenses ONLY, and therefore cannot be used as the primary or base license for a computer. Individual consumers should NOT have VL licenses on their computers.

    This is why you were seeing the "software counterfeiting" messages on your computer, because the current installation of XP is an unauthorized installation.

    Your installation of Office 2007 Enterprise is also nongenuine for the reason that it was installed with a Blcoked Volume Licensing Key.  Again, individual consumers should not have VL editions of Office installed.  If you purchased this copy of Office thinking it was a retail copy of Office, you most likely purchased counterfeit software.

    Look on the computer or in the materials that came with your computer to see if you have a Certificate of Authenticity (CoA).  If you have one, tell us about the CoA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or another version or edition of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the Product Key that may be printed on the CoA.

    5.  Windows XP purchased in retail packaging will have the CoA on the retail package box top, and will have the Product Key on a yellow-orange label affixed to the CD holder folder inside the box.

    Not sure what to look for?  Click here: 
    http://www.microsoft.com/resources/howtotell/en/coa.mspx


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Monday, July 13, 2009 5:07 AM
  • Thanks for the reply.

    1. XP Pro

    2. Not OEM (Box marked "For PCs with windows 95 or earlier, or PCs without Windows")

    3. No - Just the generic box as per the "how to tell"

    4. -

    5. The box definitely has the CoA on the top and I definitely have a Product Key (all as per "How to tell")

    Also, I checked all the CD markings and all were identical to the "how to tell" images

    Cheers, Bob
    Monday, July 13, 2009 6:33 AM
  • Hello Bob965,

    The Product Key (PK) currently installed ends in 2487J-KWKMF-RPWBY.  Please compare this to the PK that is printed on the yelow-orange PK sticker that you wil find on the CD holder folder of the retail packaging for your XP Pro.

    If the PK on your PK sticker is different from 2487J-KWKMF-RPWBY, please use the PK Updater Utility  http://go.microsoft.com/fwlink/?linkid=45668 to change the PK from the one ending in 2487J-KWKMF-RPWBY to the PK on your PK sticker.

    If you can change the PK successfully, restart the computer, rerun the mgadiag utility, then post a fresh report in a response.

    If the PK on the sticker is the same as the one ending in 2487J-KWKMF-RPWBY, please insert the CD that came in the retail XP Pro packaging, navigate to the \i386 folder, and look for a small text file called setupp.ini.  In that text file you will find two sections.  Please copy and paste the second section ("PID") into your response.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Monday, July 13, 2009 3:04 PM
  • Thanks Dan,

    The product code on my packaging is nothing like this code??????? The problem is the code I have won't update either??? Keeps telling me it is not a valid code.  I must have used this code when I loaded the OS originally.  Something has managed to change it somewhere along the way.

    This is the data off my disc

    [Pid]
    ExtraData=796674736977656D7A622E385892A4
    Pid=55274270

    Hope you can help!

    Thanks again,

    Bob
    Monday, July 13, 2009 9:53 PM
  • Hello Bob965,

    You purchased a full retail license for XP Pro in the nice pretty retail package.  However, the CD in the package installed a volume licensing edition of XP Pro, and used the now-geographically blocked VLK, instead of installing a full retail license.  The CD itself contains volume licensing bits instead of full retail bits, as evidenced by the last line of te setupp.ini file "Pid=55274270".    The value "270" is used ONLY with Volume Licensing bits.

    Please use the messaging you are seeing from the WGA Notifications Utility to prepare and submit a counterfeit software report so you can send your materials to Microsoft for evaluation and possible complimentary replacement.  The process can take 4-6 weeks.

    Please come back here to let us know how it all turned out.


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Tuesday, July 14, 2009 3:33 AM
  • Dan, gee thanks for the news!

    I have submitted the online form, I don't know how I will fair as I don't have the address of the re-seller (purchased online in 2006).  Oh well I'll see how I go.

    Once again, thanks for you expertise.

    Cheers, Bob
    Tuesday, July 14, 2009 11:47 AM
  • Diagnostic Report (1.9.0011.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Geographically blocked PID
    Validation Code: 13

    Cached Validation Code: N/A
    Windows Product Key: *****-*****-T4YDB-PB6DG-JPKMJ
    Windows Product Key Hash: kLpNTgYGTsUYia9HU4fgu7ASyNA=
    Windows Product ID: 55274-640-1011873-23081
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    ID: {6D47A9C0-E73C-4A4E-991C-272646951845}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.40.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1_E2AD56EA-765-b036_E2AD56EA-766-0_E2AD56EA-134-80004005
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 3
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-543-80070002_025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{6D47A9C0-E73C-4A4E-991C-272646951845}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-JPKMJ</PKey><PID>55274-640-1011873-23081</PID><PIDType>1</PIDType><SID>S-1-5-21-839522115-343818398-682003330</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>D11020M_</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>GC11020M.86A.1084.2006.1110.1012</Version><SMBIOSVersion major="2" minor="4"/><Date>20061110000000.000000+000</Date></BIOS><HWID>4244335F0184C066</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData>      <Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: no
    Marker string from BIOS: N/A
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A

    Thursday, July 16, 2009 1:01 AM
  • Diagnostic Report (1.9.0011.0): ----------------------------------------- WGA Data--> Validation Status: Invalid Product Key Validation Code: 8 Cached Validation Code: N/A Windows Product Key: *****-*****-KFRFK-DMTBM-RWKQD Windows Product Key Hash: ypMIM8cYIMr+ZUyvnt2tu6PjtGs= Windows Product ID: 55274-641-9482496-23857 Windows Product ID Type: 1 Windows License Type: Volume Windows OS version: 5.1.2600.2.00010100.3.0.pro ID: {140B18FD-2B5E-4CF6-BF5C-E8AA586C9D5F}(3) Is Admin: Yes TestCab: 0x0 WGA Version: Registered, 1.9.40.0 Signed By: Microsoft Product Name: N/A Architecture: N/A Build lab: N/A TTS Error: N/A Validation Diagnostic: 025D1FF3-230-1 Resolution Status: N/A WgaER Data--> ThreatID(s): N/A Version: N/A WGA Notifications Data--> Cached Result: 8 File Exists: Yes Version: 1.9.40.0 WgaTray.exe Signed By: Microsoft WgaLogon.dll Signed By: Microsoft OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 114 Blocked VLK 2 Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2 OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-230-1 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32) Default Browser: C:\Program Files\Opera\opera.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: {140B18FD-2B5E-4CF6-BF5C-E8AA586C9D5F}1.9.0011.05.1.2600.2.00010100.3.0.prox32*****-*****-*****-*****-RWKQD55274-641-9482496-238571S-1-5-21-1547161642-606747145-839522115..Phoenix Technologies, LTD6.00 PG20081003000000.000000+00003ED36FF0184EE78042F0409Central European Standard Time(GMT+01:00)03114114Microsoft Office Professional Edition 20031159D1605114E3500vfZmaSmFPIYrLWTcZSZErUQg+Fo=73931-640-0000106-5747114 Licensing Data--> N/A HWID Data--> N/A OEM Activation 1.0 Data--> BIOS string matches: no Marker string from BIOS: N/A Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005 OEM Activation 2.0 Data--> N/A
    Thursday, July 16, 2009 8:35 AM
  • Hello nasser radi,

    Please repost your problem in your own thread.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Friday, July 17, 2009 2:12 PM
  • Hello offot,

    Please repost your problem in your own thread.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Friday, July 17, 2009 2:13 PM