locked
Windows tells me it is counterfeit RRS feed

  • Question

  •  

    My Windows XP Home SP2 is now telling me every bootup that it is pirated/not-genuine.

    I have a valid COA on the bottom of the computer.  While troubleshooting this, I shot my own foot and had to re activate Windows.  The helpful person told me that my windows was now active AND genuine, yet the popups still come up.

    So I have run the diag piece and here are the results:

    Diagnostic Report (1.5.0540.0):
    -----------------------------------------
    WGA Data-->
    Genuine Validation Status: Genuine
    Windows Product Key: *****-*****-FXQWR-74FGM-GH4TJ
    Windows Product Key Hash: wVSSH2ZZ64b6sEjBbIcoT3EE0S4=
    Windows Product ID: 55277-OEM-2113894-84691
    Windows Product ID Type: 3
    Windows License Type: COA/Sysem Builder
    Windows OS version: 5.1.2600.2.00010300.2.0.hom
    Download Center code: SGHW6F5
    ID: 0edcb5ef-b716-4a91-9f65-54ebd9caa58e
    Is Admin: Yes
    AutoDial: No
    Registry: 0x0
    WGA Version: Registered, 1.5.540.0
    Signature Type: Unknown.
    Validation Diagnostic: 63BB5E84-811-80004005_E2AD56EA-111-8009_E2AD56EA-112-800b0001_BB5C1257-47-80004005_BB5C1257-52-80040203_78155E4D-278-80040203

    System Scan Data-->
    Scan: Complete
    Cryptography: Complete

    Notifications Data-->
    Cached Result: 5
    Cache refresh Interval: 719 seconds
    Extended notification delay(non-genuine): N/A
    Extended notification delay(un-activated): N/A
    All disabled: N/A
    Reminder reduced: N/A
    File Exists: Yes
    Version: 1.5.540.0
    Signatue Type: N/A

    OGA Data-->
    Office Status: 100
    Office Diagnostics: E2AD56EA-341-8009_E2AD56EA-342-800b0001_16E0B333-57-80004005_B4D0AA8B-836-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>0edcb5ef-b716-4a91-9f65-54ebd9caa58e</UGUID><Version>1.5.0540.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><PKey>*****-*****-*****-*****-GH4TJ</PKey><PID>55277-OEM-2113894-84691</PID><PIDType>3</PIDType><SID>S-1-5-21-448486026-2437969446-162025716</SID><SYSTEM><Manufacturer>Dell Computer Corporation</Manufacturer><Model>Inspiron 2600</Model></SYSTEM><BIOS><Manufacturer>PHOENIX TECHNOLOGIES,INC.</Manufacturer><Version>A09</Version><SMBIOSVersion major="2" minor="3"/><Date>20030224000000.000000+000</Date><SLPBIOS>Dell System,Dell Computer,Dell System,Dell System</SLPBIOS></BIOS><HWID>8BBE3707018400CE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Atlantic Standard Time(GMT-04:00)</TimeZone></MachineData>   <Software><Office><Result>100</Result><Products><Product GUID="{91130409-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Small Business</Name><Ver>10</Ver><Val>170CF0F6C30FCC0</Val><Hash>qSMd3ZrFjPy2DyzYaW3rteISJ0I=</Hash><Pid>54188-OEM-1790756-74880</Pid></Product></Products></Office></Software></GenuineResults> 

    I hope you can provide a solution.

     

    Dale

    dpoole@upei.ca

    Friday, August 4, 2006 6:04 PM

Answers

  • Daleus,

    Thank you for posting back here, and letting us know what was going on.

     

    Monday, August 7, 2006 6:20 PM

All replies

  • The issue seems to lie with the "unknown" signature that is coming up more commonly now. The "unknown" signature denotes a problem with detecting digital signatures.

     

    Can you try these steps?

     

    http://support.microsoft.com/Default.aspx?kbid=813442

     

    -phil

    Friday, August 4, 2006 6:18 PM
  • Hiya Phil and thanks very much for the very quick response.

    Wasn't able to get to this procedure until this ayem.

    I was able to successfully register all of these components, but I still get the counterfeit message upon reboot.

    Interestingly, all of the DLLs, when registered, prompted a confirmation dialog and an audible prompt, except the initpki.dll.

    In did them in order, I did initpki twice in a row and then moved on to the rest.  At the end of thelist, I did initpki again, but didn't get the audible alert or the dialog.  However, when I closed the command line interface, underneath it was the "ok" confirmation dialog for initpki.dll.

    So, end result, everything seems to have registered but still I get the counterfeit warning.

    Is there something further I can try?  Thanks very much for your attention to this!

    Dale\

    Monday, August 7, 2006 1:02 PM
  • Daleus,

    Can you run the diagnostics tool again?

    Thanks, very much.

    Monday, August 7, 2006 2:54 PM
  • No problemo Derrick, here it is just below.

    I also wanted to add that there *was* a slight change in behaviour. Although the "counterfeit warning" still appears upon boot up, and it still requires user interaction to click a button to learn more about WGA or to ignore it, when the Windows desktop is finally loaded and the user logs in, there are no more notifications abd the WGA "star" icon in the system tray is no longer present.  It's as though the problem has been solved, but the notification part went on vacation ;)

    Diagnostic Report (1.5.0540.0):
    -----------------------------------------
    WGA Data-->
    Genuine Validation Status: Genuine
    Windows Product Key: *****-*****-FXQWR-74FGM-GH4TJ
    Windows Product Key Hash: wVSSH2ZZ64b6sEjBbIcoT3EE0S4=
    Windows Product ID: 55277-OEM-2113894-84691
    Windows Product ID Type: 3
    Windows License Type: COA/Sysem Builder
    Windows OS version: 5.1.2600.2.00010300.2.0.hom
    Download Center code: F5JTN45
    ID: 0edcb5ef-b716-4a91-9f65-54ebd9caa58e
    Is Admin: Yes
    AutoDial: No
    Registry: 0x0
    WGA Version: Registered, 1.5.540.0
    Signature Type: Microsoft
    Validation Diagnostic: 63BB5E84-811-80004005

    System Scan Data-->
    Scan: Complete
    Cryptography: Complete

    Notifications Data-->
    Cached Result: 5
    Cache refresh Interval: 13531 seconds
    Extended notification delay(non-genuine): N/A
    Extended notification delay(un-activated): N/A
    All disabled: N/A
    Reminder reduced: N/A
    File Exists: Yes
    Version: 1.5.540.0
    Signatue Type: Microsoft

    OGA Data-->
    Office Status: 100
    Office Diagnostics:

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>0edcb5ef-b716-4a91-9f65-54ebd9caa58e</UGUID><Version>1.5.0540.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><PKey>*****-*****-*****-*****-GH4TJ</PKey><PID>55277-OEM-2113894-84691</PID><PIDType>3</PIDType><SID>S-1-5-21-448486026-2437969446-162025716</SID><SYSTEM><Manufacturer>Dell Computer Corporation</Manufacturer><Model>Inspiron 2600</Model></SYSTEM><BIOS><Manufacturer>PHOENIX TECHNOLOGIES,INC.</Manufacturer><Version>A09</Version><SMBIOSVersion major="2" minor="3"/><Date>20030224000000.000000+000</Date><SLPBIOS>Dell System,Dell Computer,Dell System,Dell System</SLPBIOS></BIOS><HWID>8BBE3707018400CE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Atlantic Standard Time(GMT-04:00)</TimeZone></MachineData>      <Software><Office><Result>100</Result><Products><Product GUID="{91130409-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Small Business</Name><Ver>10</Ver><Val>170CF0F6C30FCC0</Val><Hash>qSMd3ZrFjPy2DyzYaW3rteISJ0I=</Hash><Pid>54188-OEM-1790756-74880</Pid></Product></Products></Office></Software></GenuineResults> 

    Thanks for your help - say howdy to Phil for me!

    Dale

    Monday, August 7, 2006 4:40 PM
  • Dale, please reboot after registering those files. :)

     

    If you wish, you can simply click start, then click run, then type in "wgatray.exe /b" (which just restarts WGA Notifications manually to refresh itself).

     

    You should be good to go.

     

    -phil

    Monday, August 7, 2006 4:48 PM
  • Hiya Phil,

    Actually that's the only problem remaining.  Even after reboots, as described above in my reply to Derrick, the warning continues to pop up and requires user interaction in order to fully log in to windows.  Still.

    Cheers!

    Dale


    Monday, August 7, 2006 5:01 PM
  • Dale:

     

    How about reinstalling the WGA 540 program manually?

    http://go.microsoft.com/fwlink/?linkid=69498

    I'm actually very curious as to why the login interrupt still happens. It should not appear after registering those security files. Please let me know if reinstalling the WGA 540 program works for you. Otherwise we can take this into a support request!

    -phil

    Monday, August 7, 2006 5:32 PM
  • Heya Phil,

    Good news!  Your original message as it appeared in my inbox, did not show the line about "wgatray.exe /b".  When I viewed it on the forum, I tried it and now there is *no* notification!

    Woohoo!  Count this one as a success.  Please pass along my thanks to Derrick and take a big share for yourself too.

    Thanks for the great help!

    Dale.


    Monday, August 7, 2006 5:57 PM
  • Daleus,

    Thank you for posting back here, and letting us know what was going on.

     

    Monday, August 7, 2006 6:20 PM