locked
Help with validation please. RRS feed

  • Question

  • Hi guys.

    I'm back, having on occasion persuaded WGANotify that I do have a genuine copy, only to see the popup appear again on restart. Any help would be much appreciated!

    Josh

    Diagnostic Report (1.5.0540.0):
    -----------------------------------------
    WGA Data-->
    Genuine Validation Status: Genuine
    Windows Product Key: *****-*****-88DJH-QB7D9-P38VG
    Windows Product Key Hash: Stkocc4uIQ8liv4FOsHvug9lIXk=
    Windows Product ID: 76487-OEM-2252656-18110
    Windows Product ID Type: 3
    Windows License Type: COA/Sysem Builder
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    Download Center code: Expired code.
    ID: 84f27745-3c7e-4669-9f74-e8ad0ece2c6c
    Is Admin: Yes
    AutoDial: No
    Registry: 0x0
    WGA Version: Registered, 1.5.540.0
    Signature Type: Unknown.
    Validation Diagnostic:

    System Scan Data-->
    Scan: Complete
    Cryptography: Complete

    Notifications Data-->
    Cached Result: 5
    Cache refresh Interval: 202 seconds
    Extended notification delay(non-genuine): N/A
    Extended notification delay(un-activated): N/A
    All disabled: N/A
    Reminder reduced: N/A
    File Exists: Yes
    Version: 1.5.540.0
    Signatue Type: N/A

    OGA Data-->
    Office Status: 100
    Office Diagnostics: B4D0AA8B-528-645_B4D0AA8B-528-57_B4D0AA8B-528-57_7E90FEE8-194-80004005_7E90FEE8-194-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\PROGRA~1\MOZILL~1\FIREFOX.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>84f27745-3c7e-4669-9f74-e8ad0ece2c6c</UGUID><Version>1.5.0540.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><PKey>*****-*****-*****-*****-P38VG</PKey><PID>76487-OEM-2252656-18110</PID><PIDType>3</PIDType><SID>S-1-5-21-1715567821-1336601894-839522115</SID><SYSTEM><Manufacturer>VIAK8T</Manufacturer><Model>AWRDACPI</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20040729000000.000000+000</Date></BIOS><HWID>48FF386F0184226D</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone></MachineData>      <Software><Office><Result>100</Result><Products><Product GUID="{30120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007 (Beta)</Name><Ver>12</Ver><Val>74AE44DF1026CB4</Val><Hash>lELX7xrJfq2J1DDCEv6Pw2BFS3k=</Hash><Pid>82503-602-0016653-58796</Pid></Product><Product GUID="{30120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007 (Beta)</Name><Ver>12</Ver><Val>B378BF456E30CB4</Val><Hash>t4NmNFGUwF1cO+ulz6NMM5PMiXA=</Hash><Pid>82503-602-0016626-58015</Pid></Product></Products></Office></Software></GenuineResults>  

    Saturday, July 22, 2006 5:15 PM

Answers

  • JoshMcC,

    With XP Pro, which is what you have, if you are in a workgroup and not joined to a domain, you have to turn off Simple File Sharing to see the Security Tab.

    Excerpted from MS KB 307874 http://support.microsoft.com/kb/307874/en-us

    How to turn off simple file sharing

    To disable simple file sharing, follow these steps:

    1. Click Start, and then click My Computer.
    2. On the Tools menu, click Folder Options, and then click the View tab.
    3. In the Advanced Settings section, clear the Use simple file sharing (Recommended) check box.
    4. Click OK.

    Thursday, July 27, 2006 2:04 AM
  • Josh:

     

    Sorry for the delay! I apologize for the amount of trouble you're seeing, but lets see if we can get this through.

     

    The issue seems to lie with the "unknown" signature that is coming up more commonly now. The "unknown" signature denotes a problem with detecting digital signatures.

     

    Can you try these steps?

     

    http://support.microsoft.com/Default.aspx?kbid=813442

     

    -phil

    Monday, July 31, 2006 6:00 PM

All replies

  • JoshMcC,

    Could you give http://www.microsoft.com/genuine a try? Go to that site, then click validate. If that does not work, Try going to the latest updated file: http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=458758&SiteID=25

    Monday, July 24, 2006 2:32 PM
  • No, that doesn't get it. I'll refer you back to my post  from a couple of months ago, as the issues are identical:
    If I run the online tool at  http://www.microsoft.com/genuine in IE, then it tells me I have successfully validated, but the star-shaped validation prompt icon remains in my system tray. If I run the same tool in Firefox, I get a message saying Installation Information Data Unavailable. If I then download and run the legitcheck.hta file, I am again told that I have successfully validated, but the counterfeit software prompts still appear, even after rebooting.
    Downloading the latest updated file (
    KB905474) works the same way - the prompts still appear after rebooting.
    It seems that something somewhere is not getting the message!


    Josh
    Monday, July 24, 2006 6:23 PM
  • Josh,

    can you please locate LegitCheckControl.dll in you system32 and delete it, and then go to www.microsoft.com/genuine and validate.

    Thia should get you going.

    Anand.

    Monday, July 24, 2006 8:40 PM
  • No, that hasn't fixed it either. I tried first deleting the dll then validating and rebooting - successful validation but I still get the prompts. Next I tried deleting the dll, rebooting, validating, and then rebooting again, but this had the same result - successful validation but the prompts remain.

    What's next?!

    Josh
    Tuesday, July 25, 2006 4:21 PM
  • Josh,

    can you please run the Diag Tool (http://go.microsoft.com/fwlink/?linkid=52012) again (after deleting the control and validating) and paste the results here so we can have a look-see

    Anand.

    Tuesday, July 25, 2006 4:24 PM
  • Diagnostic Report (1.5.0540.0):
    -----------------------------------------
    WGA Data-->
    Genuine Validation Status: Genuine
    Windows Product Key: *****-*****-88DJH-QB7D9-P38VG
    Windows Product Key Hash: Stkocc4uIQ8liv4FOsHvug9lIXk=
    Windows Product ID: 76487-OEM-2252656-18110
    Windows Product ID Type: 3
    Windows License Type: COA/Sysem Builder
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    Download Center code: 3X95GS7
    ID: 84f27745-3c7e-4669-9f74-e8ad0ece2c6c
    Is Admin: Yes
    AutoDial: No
    Registry: 0x0
    WGA Version: Registered, 1.5.530.0
    Signature Type: Unknown.
    Validation Diagnostic:

    System Scan Data-->
    Scan: Complete
    Cryptography: Complete

    Notifications Data-->
    Cached Result: 5
    Cache refresh Interval: 7336 seconds
    Extended notification delay(non-genuine): N/A
    Extended notification delay(un-activated): N/A
    All disabled: N/A
    Reminder reduced: N/A
    File Exists: Yes
    Version: 1.5.540.0
    Signatue Type: N/A

    OGA Data-->
    Office Status: 100
    Office Diagnostics: B4D0AA8B-528-645_B4D0AA8B-528-57_B4D0AA8B-528-57_7E90FEE8-194-80004005_7E90FEE8-194-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\PROGRA~1\MOZILL~1\FIREFOX.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>84f27745-3c7e-4669-9f74-e8ad0ece2c6c</UGUID><Version>1.5.0540.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><PKey>*****-*****-*****-*****-P38VG</PKey><PID>76487-OEM-2252656-18110</PID><PIDType>3</PIDType><SID>S-1-5-21-1715567821-1336601894-839522115</SID><SYSTEM><Manufacturer>VIAK8T</Manufacturer><Model>AWRDACPI</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20040729000000.000000+000</Date></BIOS><HWID>48FF386F0184226D</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone></MachineData>      <Software><Office><Result>100</Result><Products><Product GUID="{30120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007 (Beta)</Name><Ver>12</Ver><Val>74AE44DF1026CB4</Val><Hash>lELX7xrJfq2J1DDCEv6Pw2BFS3k=</Hash><Pid>82503-602-0016653-58796</Pid></Product><Product GUID="{30120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007 (Beta)</Name><Ver>12</Ver><Val>B378BF456E30CB4</Val><Hash>t4NmNFGUwF1cO+ulz6NMM5PMiXA=</Hash><Pid>82503-602-0016626-58015</Pid></Product></Products></Office></Software></GenuineResults> 


    Tuesday, July 25, 2006 6:44 PM
  • Differences I can see:
    Download Center Codec changed from 'Expired code' to '3X95GS7'
    WGA Version changed from '1.5.540.0' to '1.5.530.0'
    Cache Refresh Interval changed from '202' to '7336' seconds.

    Josh
    Tuesday, July 25, 2006 6:56 PM
  • Windows Update has prompted me to install WGA again - presumably an updated version. I've done so, but it hasn't had any effect on the prompts - Here's the diag:

    Diagnostic Report (1.5.0540.0):
    -----------------------------------------
    WGA Data-->
    Genuine Validation Status: Genuine
    Windows Product Key: *****-*****-88DJH-QB7D9-P38VG
    Windows Product Key Hash: Stkocc4uIQ8liv4FOsHvug9lIXk=
    Windows Product ID: 76487-OEM-2252656-18110
    Windows Product ID Type: 3
    Windows License Type: COA/Sysem Builder
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    Download Center code: Expired code.
    ID: 84f27745-3c7e-4669-9f74-e8ad0ece2c6c
    Is Admin: Yes
    AutoDial: No
    Registry: 0x0
    WGA Version: Registered, 1.5.540.0
    Signature Type: Unknown.
    Validation Diagnostic:

    System Scan Data-->
    Scan: Complete
    Cryptography: Complete

    Notifications Data-->
    Cached Result: 5
    Cache refresh Interval: 133 seconds
    Extended notification delay(non-genuine): N/A
    Extended notification delay(un-activated): N/A
    All disabled: N/A
    Reminder reduced: N/A
    File Exists: Yes
    Version: 1.5.540.0
    Signatue Type: N/A

    OGA Data-->
    Office Status: 100
    Office Diagnostics: B4D0AA8B-528-645_B4D0AA8B-528-57_B4D0AA8B-528-57_7E90FEE8-194-80004005_7E90FEE8-194-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\PROGRA~1\MOZILL~1\FIREFOX.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>84f27745-3c7e-4669-9f74-e8ad0ece2c6c</UGUID><Version>1.5.0540.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><PKey>*****-*****-*****-*****-P38VG</PKey><PID>76487-OEM-2252656-18110</PID><PIDType>3</PIDType><SID>S-1-5-21-1715567821-1336601894-839522115</SID><SYSTEM><Manufacturer>VIAK8T</Manufacturer><Model>AWRDACPI</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20040729000000.000000+000</Date></BIOS><HWID>48FF386F0184226D</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone></MachineData>      <Software><Office><Result>100</Result><Products><Product GUID="{30120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007 (Beta)</Name><Ver>12</Ver><Val>74AE44DF1026CB4</Val><Hash>lELX7xrJfq2J1DDCEv6Pw2BFS3k=</Hash><Pid>82503-602-0016653-58796</Pid></Product><Product GUID="{30120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007 (Beta)</Name><Ver>12</Ver><Val>B378BF456E30CB4</Val><Hash>t4NmNFGUwF1cO+ulz6NMM5PMiXA=</Hash><Pid>82503-602-0016626-58015</Pid></Product></Products></Office></Software></GenuineResults> 

    Looks like my WGA Version is now 1.5.540.0

    Josh
    Wednesday, July 26, 2006 7:13 AM
  • Josh:

     

    Could you verify two things for me?

     

    1 - please go to c:\windows\system32 directory and locate the file "legitcheckcontrol.dll". Right click, go to properties, then go to the security tab. Ensure all users have the READ ability on the file.

     

    2 - Also, can you open registry (start menu, then click "run" then type in "regedit") and ensure the registry key HKEY_CURRENT_USER\Software\Policies has read permissions for all users?

     

    -Phil

    Wednesday, July 26, 2006 9:15 AM
  • Hi Phil

    There appears to be no security tab in the DLL's properties - only General, Version, Digital Signatures and Summary. I can't see read permissions on any of those.

    All users have read permissions on the HKEY_CURRENT_USER\Software\Policies reg key.

    Josh
    Wednesday, July 26, 2006 4:54 PM
  • Josh,

    Try what was stated above, but do it in safe mode.

    Thanks,

    Wednesday, July 26, 2006 7:27 PM
  • JoshMcC,

    With XP Pro, which is what you have, if you are in a workgroup and not joined to a domain, you have to turn off Simple File Sharing to see the Security Tab.

    Excerpted from MS KB 307874 http://support.microsoft.com/kb/307874/en-us

    How to turn off simple file sharing

    To disable simple file sharing, follow these steps:

    1. Click Start, and then click My Computer.
    2. On the Tools menu, click Folder Options, and then click the View tab.
    3. In the Advanced Settings section, clear the Use simple file sharing (Recommended) check box.
    4. Click OK.

    Thursday, July 27, 2006 2:04 AM
  • Great, cheers Dan! I was looking for a setting like that but couldn't find it. I couldn't boot into safe mode because I get a blue screen IRQL_NOT_LESS_OR_EQUAL error - I doubt this is related to the WGA problem, but I haven't been able to fix that either!

    Anyway, all users had read permissions for the DLL.

    I've been following this thread with a guy called Ulf who seems to be going through a similar process, so just to confirm, the Digital Signature for LegitCheckControl.dll is 'OK' and the signer information box contains
    Name: Microsoft Corporation
    Email: Not available
    Signing Time: 20 June 2006 00:19:40

    Josh
    Thursday, July 27, 2006 3:07 PM
  • Bump.

    Sorry guys, but I'm still getting these prompts - what's the next step I should be trying?

    Josh
    Monday, July 31, 2006 8:43 AM
  • Josh:

     

    Sorry for the delay! I apologize for the amount of trouble you're seeing, but lets see if we can get this through.

     

    The issue seems to lie with the "unknown" signature that is coming up more commonly now. The "unknown" signature denotes a problem with detecting digital signatures.

     

    Can you try these steps?

     

    http://support.microsoft.com/Default.aspx?kbid=813442

     

    -phil

    Monday, July 31, 2006 6:00 PM
  • Good call, Phil - that appears to have fixed the problem - no prompts now on startup or in the tray.

    FYI, here is the MGADiag output:

    Diagnostic Report (1.5.0540.0):
    -----------------------------------------
    WGA Data-->
    Genuine Validation Status: Genuine
    Windows Product Key: *****-*****-88DJH-QB7D9-P38VG
    Windows Product Key Hash: Stkocc4uIQ8liv4FOsHvug9lIXk=
    Windows Product ID: 76487-OEM-2252656-18110
    Windows Product ID Type: 3
    Windows License Type: COA/Sysem Builder
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    Download Center code: JWP7RL4
    ID: 84f27745-3c7e-4669-9f74-e8ad0ece2c6c
    Is Admin: Yes
    AutoDial: No
    Registry: 0x0
    WGA Version: Registered, 1.5.540.0
    Signature Type: Microsoft
    Validation Diagnostic:

    System Scan Data-->
    Scan: Complete
    Cryptography: Complete

    Notifications Data-->
    Cached Result: 0
    Cache refresh Interval: 189 seconds
    Extended notification delay(non-genuine): N/A
    Extended notification delay(un-activated): N/A
    All disabled: N/A
    Reminder reduced: N/A
    File Exists: Yes
    Version: 1.5.540.0
    Signatue Type: Microsoft

    OGA Data-->
    Office Status: 100
    Office Diagnostics: B4D0AA8B-528-645_B4D0AA8B-528-57_B4D0AA8B-528-57_7E90FEE8-194-80004005_7E90FEE8-194-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\PROGRA~1\MOZILL~1\FIREFOX.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>84f27745-3c7e-4669-9f74-e8ad0ece2c6c</UGUID><Version>1.5.0540.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><PKey>*****-*****-*****-*****-P38VG</PKey><PID>76487-OEM-2252656-18110</PID><PIDType>3</PIDType><SID>S-1-5-21-1715567821-1336601894-839522115</SID><SYSTEM><Manufacturer>VIAK8T</Manufacturer><Model>AWRDACPI</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20040729000000.000000+000</Date></BIOS><HWID>48FF386F0184226D</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone></MachineData>      <Software><Office><Result>100</Result><Products><Product GUID="{30120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007 (Beta)</Name><Ver>12</Ver><Val>74AE44DF1026CB4</Val><Hash>lELX7xrJfq2J1DDCEv6Pw2BFS3k=</Hash><Pid>82503-602-0016653-58796</Pid></Product><Product GUID="{30120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007 (Beta)</Name><Ver>12</Ver><Val>B378BF456E30CB4</Val><Hash>t4NmNFGUwF1cO+ulz6NMM5PMiXA=</Hash><Pid>82503-602-0016626-58015</Pid></Product></Products></Office></Software></GenuineResults> 

    Thanks very much to you and all the contributors for sorting this out!

    Josh
    Monday, July 31, 2006 7:14 PM