Answered by:
Windows XP Retail version sudenly not genuine

Question
-
I purchased a retail version of Windows XP Home, installed and activated for my neighbor. She has been using it for around 2 years and suddenly she turns on her computer and gets a message "This copy of Windows is not genuine”. The only way I could get around it was to do a repair using the original disk and number. Now a month and a half later it does it again. I have the original box and she could probably produce the recipt if I asked her. What's causing this? Virus? Update?
I ran the Genuine Advantage Diagnostics Tool with the following results (I guess I'll be calling Microsoft):Diagnostic Report (1.9.0011.0):
-----------------------------------------
WGA Data-->
Validation Status: Cryptographic Errors Detected
Validation Code: 0
Cached Validation Code: N/A
Windows Product Key: *****-*****-JVJBK-J297G-F4VYR
Windows Product Key Hash: 8dL4w/yM13UHwI2LB+ZKy5kc4Qk=
Windows Product ID: 55285-015-1163897-21200
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 5.1.2600.2.00010300.3.0.hom
ID: {6204DFE5-6849-44C4-BB01-E18373294D5B}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.69.2
Signed By: N/A, hr = 0x80004005
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-8009_E2AD56EA-766-2efd_E2AD56EA-148-80004005_16E0B333-89-80004005_78155E4D-232-80004005
Resolution Status: N/A
WgaER Data-->
ThreatID(s): N/A
Version: N/A
WGA Notifications Data-->
Cached Result: 5
File Exists: Yes
Version: 1.5.540.0
WgaTray.exe Signed By: N/A, hr = 0x80004005
WgaLogon.dll Signed By: N/A, hr = 0x80004005
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 114 Blocked VLK 2
Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-230-1
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\licdll.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe[5.1.2600.5755]
File Mismatch: C:\WINDOWS\system32\ntdll.dll[5.1.2600.5755]
File Mismatch: C:\WINDOWS\system32\kernel32.dll[5.1.2600.5781]
File Mismatch: C:\WINDOWS\system32\crypt32.dll[5.131.2600.5512]
File Mismatch: C:\WINDOWS\system32\advapi32.dll[5.1.2600.5755]
File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5512]
File Mismatch: C:\WINDOWS\system32\oembios.bin[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\oembios.dat[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\oembios.sig[hr = 0x80070714]
File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{6204DFE5-6849-44C4-BB01-E18373294D5B}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010300.3.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-F4VYR</PKey><PID>55285-015-1163897-21200</PID><PIDType>5</PIDType><SID>S-1-5-21-117609710-789336058-839522115</SID><SYSTEM><Manufacturer>P4V80</Manufacturer><Model>P4VM800</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P1.40</Version><SMBIOSVersion major="2" minor="3"/><Date>20060110000000.000000+000</Date></BIOS><HWID>9E723FF70184205D</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.5.540.0"/><File Name="WgaLogon.dll" Version="1.5.540.0"/></GANotification></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57285</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults>
Licensing Data-->
N/A
HWID Data-->
N/A
OEM Activation 1.0 Data-->
BIOS string matches: yes
Marker string from BIOS: 13B16:GENUINE C&C INC
Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005
OEM Activation 2.0 Data-->
N/A
Thursday, September 3, 2009 5:53 AM
Answers
-
Hello sunckrs,
The status of Cryptographic Errors Detected means that there is a problem with the cryptographic system within the XP installation. This could be cause by a number of things, from malicious software to a hardware issue such as RAM or HDD failure.
My suggestion would be to visit Windows Update to get the latest editions of the WGA Validations and Notifications Utilities, which should report as WGA Version: Registered, 1.9.9.1 and Version: 1.9.40.0 in the mgadiag report. Yours are WGA Version: Registered, 1.7.69.2 and Version: 1.5.540.0.
Then, rerun the mgadiag utility and when it completes, click on the "Resolve" button. The later editons of these utilities have some ability to correct certain issues such as some of the Cryptographic issues. After the resolve process completes, restart the computer and visit www.microsoft.com/validate and check to see if the XP installation validates. If so, you might want to run the mgadiagonce more just as a double-check.
If no joy on the Resolve button, post back here for more advice.
For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp- Marked as answer by Darin Smith MS Friday, September 4, 2009 9:06 PM
Thursday, September 3, 2009 4:05 PM -
Hello sunckrs,
You can also go to http://microsoft.com/genuine/diag and click the Start Diagnostic. the page looks for cryptograpic (and other) issues and with either fix it for you or give instruction on how to do it yourself.
Thank you,
Darin MS- Marked as answer by Darin Smith MS Friday, September 4, 2009 9:06 PM
Friday, September 4, 2009 8:55 PM
All replies
-
Hello sunckrs,
The status of Cryptographic Errors Detected means that there is a problem with the cryptographic system within the XP installation. This could be cause by a number of things, from malicious software to a hardware issue such as RAM or HDD failure.
My suggestion would be to visit Windows Update to get the latest editions of the WGA Validations and Notifications Utilities, which should report as WGA Version: Registered, 1.9.9.1 and Version: 1.9.40.0 in the mgadiag report. Yours are WGA Version: Registered, 1.7.69.2 and Version: 1.5.540.0.
Then, rerun the mgadiag utility and when it completes, click on the "Resolve" button. The later editons of these utilities have some ability to correct certain issues such as some of the Cryptographic issues. After the resolve process completes, restart the computer and visit www.microsoft.com/validate and check to see if the XP installation validates. If so, you might want to run the mgadiagonce more just as a double-check.
If no joy on the Resolve button, post back here for more advice.
For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp- Marked as answer by Darin Smith MS Friday, September 4, 2009 9:06 PM
Thursday, September 3, 2009 4:05 PM -
Hello sunckrs,
You can also go to http://microsoft.com/genuine/diag and click the Start Diagnostic. the page looks for cryptograpic (and other) issues and with either fix it for you or give instruction on how to do it yourself.
Thank you,
Darin MS- Marked as answer by Darin Smith MS Friday, September 4, 2009 9:06 PM
Friday, September 4, 2009 8:55 PM