locked
Is the notification real? RRS feed

  • Question

  • I regularly recieve windows update and install it but i was supprised after few months notifcatin appear " You may be a victim of software counterfeiting.... I recieve this message after i download something on the internet... Now the quetion does my computer downloded a virus?
    Friday, August 21, 2009 7:27 AM

Answers

  • Hello Jenjuns,

    Right now, your computer has a Volume Licensing edition of XP Pro installed (Line 10), and that installation was done with a now geographically-blocked Volume Licensing Key (VLK) (Line 2).  VLKs are blocked by Microsoft at the request of the original keyholder for such reasons as the key was lost, stolen, compromised, misused, or expired.  Also, MS may have blocked the key if it notices a pattern of misuse, ie, more installations of XP using that key than authorized.

    A geographic block is done by Microsoft in cooperation with the original VL Keyholder to curb the unauthorized use of the VLK in areas and regions of the world where the original keyholder has no business presence.  We can see by the mgadiag report that you are located somewhere in China Standard Time Zone.

    The particular Product Key you are using, which ends in 3R89F-D2KXW-VPK3J, is a widely pirated key, and it had a geographic block put on in the March/April 2009 time frame it to try to curb its use, which probably explains why it was showing as Genuine up until recently.

    As a rule, VL editions of XP should not be sold to individual consumers.  Businesses, schools and gov'ts normally use VL editions for flexibility in installing many computers.  Additionally, VL editions are Upgrade licenses ONLY, and therfore cannot be used as the primary or base license for a computer.

    When this type of Block is found on name-brand computers, quite often this situation is the result of untrained computer repair personnel at shops using downloaded copies of XP Pro to repair computers or if a well-meaning friend ever helped you fix the computer.

    This is why you were seeing the "software counterfeiting" messages on your computer, because the current installation of XP is an unauthorized installation.

    You also have a problem with Office 2007 Enterprise.  See the snippet below:

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: Registered, 1.7.111.0
    Signed By: Microsoft


    Your installation of Office 2007 Enterprise is also nongenuine as it was done with a Blocked Volume Licensing Key.  Typically a Blocked Key is one that was legitimately issued to a larger business organization, but subsequently that organization lost control of the Product Key and the Product Key was widely distributed thru software piracy.  In fact, the Office situation is very similar to your Windows situation.

    If you want or need Office on this computer, then please uninstall the nongenuine copy and purchase a genuine full retail copy from a trusted local or online store.

    Next look on the computer itself, in the documentation you received with the computer or with your retail purchase of Windows to see if you have a Certificate of Authenticity (COA).  If you have one, tell us about the COA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or Media Center, or another version of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the full Product Key that may be printed on the CoA.

    Not sure what to look for?  See this page for reference:  http://www.microsoft.com/resources/howtotell/en/coa.mspx

    NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.


    Also, please let us know the same information regarding Office 2007, did you purchase it in a nuce pretty retail box and do you have a CoA for Office 2007?


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Wednesday, September 9, 2009 4:42 PM
    Saturday, August 22, 2009 2:36 AM

All replies

  • Hello Jejuns,

    We understand the inconvenience you are currently experiencing and would like to provide you with some self-help options we have made available for our customers. Please follow the steps outlined below as it could either resolve your issue or, if need be, provide us with additional information to determine the cause of this issue.

                                                          

    1.      Ensure you log onto the computer experiencing the issue with “Administrator” rights.

    2.      Next we would like to confirm that you are running the most current version of the Genuine Advantage control on your computer. In order to do this please follow the below link and choose the “Validate Windows” option.

     

    http://www.microsoft.com/genuine

     

    If the above steps did not resolve your issue lets continue with the steps below.

    If you could also please follow the steps outlined below, the diagnostics Web Site will attempt to resolve the validation errors you are experiencing with Windows.

    http://www.microsoft.com/Genuine/diag/RunDiags.aspx?displayLang=en

    Next follow the on-screen prompts to resolve the issue if any of the checks at the above site fail. If, after attempting to resolve the issue as per the instructions on the above site fails, please refer to the link below and run the MGA Diagnostics tool:

     

    http://go.microsoft.com/fwlink/?linkid=52012

     

    You will be prompted to either “Run” or “Save” the tool. Choose to “Run” the tool and follow the on-screen prompts. You will receive an “Internet Explorer-Security Warning” dialog box for the “Windows Genuine Advantage Diagnostic Tool”; you must choose to “Run” this tool when prompted.

     

    Once you are presented with the Diagnostics tool choose “Continue” to run the diagnostic report. If the “RESOLVE” button is available after running the diagnostics, please click “RESOLVE” to allow the diagnostic tool to attempt a repair.

     

    1.      After running the MGA Diagnostic tool, click on the “Windows” tab and then click on “Copy”.

    2.      Please return to this post and “Paste” the results here for additional review.

     

    Next look on the computer itself, in the documentation you received with the computer or with your retail purchase of Windows to see if you have a Certificate of Authenticity (COA).  If you have one, tell us about the COA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or Media Center, or another version of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the full Product Key that may be printed on the CoA.

    Not sure what to look for?  See this page for reference:  http://www.microsoft.com/resources/howtotell/en/coa.mspx

     

    NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Friday, August 21, 2009 2:59 PM
  • Here is the result Mr. Dan as i test Diagnostic Report (1.9.0011.0):   I appreciate if you can help through this Mr. thank's a lot...
    -----------------------------------------
    WGA Data-->
    Validation Status: Geographically blocked PID
    Validation Code: 13

    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
    Windows Product ID: 55274-640-8365391-23510
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {A7B9D305-46B1-4486-8FC1-6AEA5A9E86D2}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.40.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 13
    File Exists: Yes
    Version: 1.9.40.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: Registered, 1.7.111.0
    Signed By: Microsoft
    Office Diagnostics: B4D0AA8B-604-645_77F760FE-153-80070002_7E90FEE8-175-80070002_B4D0AA8B-604-645_025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{A7B9D305-46B1-4486-8FC1-6AEA5A9E86D2}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VPK3J</PKey><PID>55274-640-8365391-23510</PID><PIDType>1</PIDType><SID>S-1-5-21-527237240-1844823847-725345543</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0501   </Version><SMBIOSVersion major="2" minor="4"/><Date>20080115000000.000000+000</Date></BIOS><HWID>1332399701846E7B</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>China Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65893</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: yes
    Marker string from BIOS: 14400:ASUSTeK Computer Inc|108FF:GENUINE C&C INC
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A

     

    Friday, August 21, 2009 11:57 PM
  • Hello Jenjuns,

    Right now, your computer has a Volume Licensing edition of XP Pro installed (Line 10), and that installation was done with a now geographically-blocked Volume Licensing Key (VLK) (Line 2).  VLKs are blocked by Microsoft at the request of the original keyholder for such reasons as the key was lost, stolen, compromised, misused, or expired.  Also, MS may have blocked the key if it notices a pattern of misuse, ie, more installations of XP using that key than authorized.

    A geographic block is done by Microsoft in cooperation with the original VL Keyholder to curb the unauthorized use of the VLK in areas and regions of the world where the original keyholder has no business presence.  We can see by the mgadiag report that you are located somewhere in China Standard Time Zone.

    The particular Product Key you are using, which ends in 3R89F-D2KXW-VPK3J, is a widely pirated key, and it had a geographic block put on in the March/April 2009 time frame it to try to curb its use, which probably explains why it was showing as Genuine up until recently.

    As a rule, VL editions of XP should not be sold to individual consumers.  Businesses, schools and gov'ts normally use VL editions for flexibility in installing many computers.  Additionally, VL editions are Upgrade licenses ONLY, and therfore cannot be used as the primary or base license for a computer.

    When this type of Block is found on name-brand computers, quite often this situation is the result of untrained computer repair personnel at shops using downloaded copies of XP Pro to repair computers or if a well-meaning friend ever helped you fix the computer.

    This is why you were seeing the "software counterfeiting" messages on your computer, because the current installation of XP is an unauthorized installation.

    You also have a problem with Office 2007 Enterprise.  See the snippet below:

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: Registered, 1.7.111.0
    Signed By: Microsoft


    Your installation of Office 2007 Enterprise is also nongenuine as it was done with a Blocked Volume Licensing Key.  Typically a Blocked Key is one that was legitimately issued to a larger business organization, but subsequently that organization lost control of the Product Key and the Product Key was widely distributed thru software piracy.  In fact, the Office situation is very similar to your Windows situation.

    If you want or need Office on this computer, then please uninstall the nongenuine copy and purchase a genuine full retail copy from a trusted local or online store.

    Next look on the computer itself, in the documentation you received with the computer or with your retail purchase of Windows to see if you have a Certificate of Authenticity (COA).  If you have one, tell us about the COA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or Media Center, or another version of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the full Product Key that may be printed on the CoA.

    Not sure what to look for?  See this page for reference:  http://www.microsoft.com/resources/howtotell/en/coa.mspx

    NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.


    Also, please let us know the same information regarding Office 2007, did you purchase it in a nuce pretty retail box and do you have a CoA for Office 2007?


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Wednesday, September 9, 2009 4:42 PM
    Saturday, August 22, 2009 2:36 AM
  • Ah! Mr. thank's anyway... I shall purchase with Genuine... By the way I located at the Philippines....
    Saturday, August 22, 2009 11:26 PM