locked
Windows XP Retail version sudenly not genuine RRS feed

  • Question

  • I purchased a retail version of Windows XP Home, installed and activated for my neighbor. She has been using it for around 2 years and suddenly she turns on her computer and gets a message "This copy of Windows is not genuine”. The only way I could get around it was to do a repair using the original disk and number. Now a month and a half later it does it again. I have the original box and she could probably produce the recipt if I asked her. What's causing this? Virus? Update?

    I ran the Genuine Advantage Diagnostics Tool with the following results (I guess I'll be calling Microsoft):

    Diagnostic Report (1.9.0011.0):

    -----------------------------------------

    WGA Data-->

    Validation Status: Cryptographic Errors Detected

    Validation Code: 0

     

    Cached Validation Code: N/A

    Windows Product Key: *****-*****-JVJBK-J297G-F4VYR

    Windows Product Key Hash: 8dL4w/yM13UHwI2LB+ZKy5kc4Qk=

    Windows Product ID: 55285-015-1163897-21200

    Windows Product ID Type: 5

    Windows License Type: Retail

    Windows OS version: 5.1.2600.2.00010300.3.0.hom

    ID: {6204DFE5-6849-44C4-BB01-E18373294D5B}(3)

    Is Admin: Yes

    TestCab: 0x0

    WGA Version: Registered, 1.7.69.2

    Signed By: N/A, hr = 0x80004005

    Product Name: N/A

    Architecture: N/A

    Build lab: N/A

    TTS Error: N/A

    Validation Diagnostic: 025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-8009_E2AD56EA-766-2efd_E2AD56EA-148-80004005_16E0B333-89-80004005_78155E4D-232-80004005

    Resolution Status: N/A

     

    WgaER Data-->

    ThreatID(s): N/A

    Version: N/A

     

    WGA Notifications Data-->

    Cached Result: 5

    File Exists: Yes

    Version: 1.5.540.0

    WgaTray.exe Signed By: N/A, hr = 0x80004005

    WgaLogon.dll Signed By: N/A, hr = 0x80004005

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 114 Blocked VLK 2

    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-230-1

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

    File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512]

    File Mismatch: C:\WINDOWS\system32\licdll.dll[5.1.2600.5512]

    File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe[5.1.2600.5755]

    File Mismatch: C:\WINDOWS\system32\ntdll.dll[5.1.2600.5755]

    File Mismatch: C:\WINDOWS\system32\kernel32.dll[5.1.2600.5781]

    File Mismatch: C:\WINDOWS\system32\crypt32.dll[5.131.2600.5512]

    File Mismatch: C:\WINDOWS\system32\advapi32.dll[5.1.2600.5755]

    File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5512]

    File Mismatch: C:\WINDOWS\system32\oembios.bin[hr = 0x80070714]

    File Mismatch: C:\WINDOWS\system32\oembios.dat[hr = 0x80070714]

    File Mismatch: C:\WINDOWS\system32\oembios.sig[hr = 0x80070714]

    File Mismatch: C:\WINDOWS\system32\syssetup.dll[5.1.2600.5512]

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{6204DFE5-6849-44C4-BB01-E18373294D5B}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010300.3.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-F4VYR</PKey><PID>55285-015-1163897-21200</PID><PIDType>5</PIDType><SID>S-1-5-21-117609710-789336058-839522115</SID><SYSTEM><Manufacturer>P4V80</Manufacturer><Model>P4VM800</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P1.40</Version><SMBIOSVersion major="2" minor="3"/><Date>20060110000000.000000+000</Date></BIOS><HWID>9E723FF70184205D</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.5.540.0"/><File Name="WgaLogon.dll" Version="1.5.540.0"/></GANotification></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57285</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults> 

     

    Licensing Data-->

    N/A

     

    HWID Data-->

    N/A

     

    OEM Activation 1.0 Data-->

    BIOS string matches: yes

    Marker string from BIOS: 13B16:GENUINE C&C INC

    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

     

    OEM Activation 2.0 Data-->

    N/A

     

    Thursday, September 3, 2009 5:53 AM

Answers

  • Hello sunckrs,

    The status of Cryptographic Errors Detected means that there is a problem with the cryptographic system within the XP installation.  This could be cause by a number of things, from malicious software to a hardware issue such as RAM or HDD failure.

    My suggestion would be to visit Windows Update to get the latest editions of the WGA Validations and Notifications Utilities, which should report as WGA Version: Registered, 1.9.9.1 and Version: 1.9.40.0 in the mgadiag report.  Yours are WGA Version: Registered, 1.7.69.2 and   Version: 1.5.540.0.

    Then, rerun the mgadiag utility and when it completes, click on the "Resolve" button.  The later editons of these utilities have some ability to correct certain issues such as some of the Cryptographic issues.  After the resolve process completes, restart the computer and visit www.microsoft.com/validate and check to see if the XP installation validates.  If so, you might want to run the mgadiagonce more just as a double-check.

    If no joy on the Resolve button, post back here for  more advice.

    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Friday, September 4, 2009 9:06 PM
    Thursday, September 3, 2009 4:05 PM
  • Hello sunckrs,

      You can also go to http://microsoft.com/genuine/diag and click the Start Diagnostic.  the page looks for cryptograpic (and other) issues and with either fix it for you or give instruction on how to do it yourself.

    Thank you,
    Darin MS 
    • Marked as answer by Darin Smith MS Friday, September 4, 2009 9:06 PM
    Friday, September 4, 2009 8:55 PM

All replies

  • Hello sunckrs,

    The status of Cryptographic Errors Detected means that there is a problem with the cryptographic system within the XP installation.  This could be cause by a number of things, from malicious software to a hardware issue such as RAM or HDD failure.

    My suggestion would be to visit Windows Update to get the latest editions of the WGA Validations and Notifications Utilities, which should report as WGA Version: Registered, 1.9.9.1 and Version: 1.9.40.0 in the mgadiag report.  Yours are WGA Version: Registered, 1.7.69.2 and   Version: 1.5.540.0.

    Then, rerun the mgadiag utility and when it completes, click on the "Resolve" button.  The later editons of these utilities have some ability to correct certain issues such as some of the Cryptographic issues.  After the resolve process completes, restart the computer and visit www.microsoft.com/validate and check to see if the XP installation validates.  If so, you might want to run the mgadiagonce more just as a double-check.

    If no joy on the Resolve button, post back here for  more advice.

    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Darin Smith MS Friday, September 4, 2009 9:06 PM
    Thursday, September 3, 2009 4:05 PM
  • Hello sunckrs,

      You can also go to http://microsoft.com/genuine/diag and click the Start Diagnostic.  the page looks for cryptograpic (and other) issues and with either fix it for you or give instruction on how to do it yourself.

    Thank you,
    Darin MS 
    • Marked as answer by Darin Smith MS Friday, September 4, 2009 9:06 PM
    Friday, September 4, 2009 8:55 PM