locked
XP Genuine, but is it legal? RRS feed

  • Question

  • Working with a person who got a computer from someone, and obtained the following MGADiag.exe report: 

     

    Diagnostic Report (1.7.0062.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-6JRYC-X66GX-JVY2D
    Windows Product Key Hash: QlMc4eVzNRH58UjkaRc+5fkLfC8=
    Windows Product ID: 55274-640-1479176-23233
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.0.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {188022B2-A5FF-425A-9DC2-A59DFCC04C16}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.36.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-171-1
    Resolution Status: N/A

    Vista BRT Data-->
    Grace Flag: N/A
    Commit: N/A
    Reboot Flag: N/A
    ThreatID(s): N/A
    Wgaer.exe Version: N/A, hr = 0x80070002
    Wgaer.exe Signed By: N/A, hr = 0x80070002

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2968-80070002

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\WINDOWS\system32\ntoskrnl.exe

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{188022B2-A5FF-425A-9DC2-A59DFCC04C16}</UGUID><Version>1.7.0062.0</Version><OS>5.1.2600.2.00010100.0.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-JVY2D</PKey><PID>55274-640-1479176-23233</PID><PIDType>1</PIDType><SID>S-1-5-21-1004336348-1078145449-1957994488</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO., LTD</Manufacturer><Model>VT82C694X</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="2"/><Date>20010205******.******+***</Date></BIOS><HWID>3FF13AE701842037</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData> <Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults>

    However, when using Google for the Product Key: *****-*****-6JRYC-X66GX-JVY2D it is openly showing in key hack threads!

    Has the Product Key of this version of Windows XP been cracked?

     

    Thank you for your help.


    Thursday, October 18, 2007 11:24 PM

Answers

  • Aaflac,

     

    The highlighted green text will show the license type installed:

     

    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-6JRYC-X66GX-JVY2D
    Windows Product Key Hash: QlMc4eVzNRH58UjkaRc+5fkLfC8=
    Windows Product ID: 55274-640-1479176-23233
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.0.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {188022B2-A5FF-425A-9DC2-A59DFCC04C16}(3)
    Is Admin: Yes

     

    Note that a Volume License for XP is an Upgrade-only license so it cannot be properly used as the original or only OS license on a computer.  There has to be a previous Windows OS license for this computer, and that license is what is being upgraded by the Volume License.  Typically there would be a systembuilder/OEM license installed on the computer, and that license would be documented by the presence of a Certificate of Authenticity.

    The highlighted green text will show the computer manufacturer:

     

    Office Details: <GenuineResults><MachineData><UGUID>{188022B2-A5FF-425A-9DC2-A59DFCC04C16}</UGUID><Version>1.7.0062.0</Version><OS>5.1.2600.2.00010100.0.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-JVY2D</PKey><PID>55274-640-1479176-23233</PID><PIDType>1</PIDType><SID>S-1-5-21-1004336348-1078145449-1957994488</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO., LTD</Manufacturer><Model>VT82C694X</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="2"/><Date>20010205******.******+***</Date></BIOS><HWID>3FF13AE701842037</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData> <Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults>

    Micro-Star International (aka MSI) is a major motherboard manufacturer whose products are widely used by hobbyists and neighborhood computer manufacturers/assemblers, who in turn would normally use a systembuilder/OEM license for XP.  Computers with proper systembuilder/OEM licenses will have a CoA for that edition of XP affixed to the computer's case.

     

    Given the circumstances you have described, that being this computer is owned by a single individual with no reasonable connection to a medium or larger business, an educational institution, or a government agency, that would own the Product Key used to install XP, although the Product key is Genuine, it's not very likely that this is Genuine installation of XP.

    Friday, October 19, 2007 2:16 AM

All replies

  • Aaflac,

     

    Right now your computer is running a Volume License for XP Pro.  Are you in an environment where such a license is expected, such as in a medium or larger sized business, school/educational, or governmental setting?  If not, it's likely that the Volume License is being used without the permission of the owning organization and likely outside of the license terms.

     

    Typically a "clone" or "whitebox" computer being used by an individual or small business would have an systembuilder/OEM license for XP installed.

     

    Thursday, October 18, 2007 11:32 PM
  • Thank you for your reply.

     

    This computer belongs to someone that I am trying to help with the cleanup of a variety of malware. I get the feeling that all is not what it appears to be, and that he is 'giving me a story', but the guy was able to download SP2.

     

    Would he be able to download SP2 even if the computer is being used outside of the license terms?

     

    Also, how could I tell, from the MGADiag report, that a systembuilder/OEM license for XP is missing? Is there any particular entry on the report that identifies it?

     

    Once again, thank you very much for the valuable information.

     

     

     

    Friday, October 19, 2007 12:55 AM
  • Aaflac,

     

    The highlighted green text will show the license type installed:

     

    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-6JRYC-X66GX-JVY2D
    Windows Product Key Hash: QlMc4eVzNRH58UjkaRc+5fkLfC8=
    Windows Product ID: 55274-640-1479176-23233
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.0.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {188022B2-A5FF-425A-9DC2-A59DFCC04C16}(3)
    Is Admin: Yes

     

    Note that a Volume License for XP is an Upgrade-only license so it cannot be properly used as the original or only OS license on a computer.  There has to be a previous Windows OS license for this computer, and that license is what is being upgraded by the Volume License.  Typically there would be a systembuilder/OEM license installed on the computer, and that license would be documented by the presence of a Certificate of Authenticity.

    The highlighted green text will show the computer manufacturer:

     

    Office Details: <GenuineResults><MachineData><UGUID>{188022B2-A5FF-425A-9DC2-A59DFCC04C16}</UGUID><Version>1.7.0062.0</Version><OS>5.1.2600.2.00010100.0.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-JVY2D</PKey><PID>55274-640-1479176-23233</PID><PIDType>1</PIDType><SID>S-1-5-21-1004336348-1078145449-1957994488</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO., LTD</Manufacturer><Model>VT82C694X</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="2"/><Date>20010205******.******+***</Date></BIOS><HWID>3FF13AE701842037</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData> <Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults>

    Micro-Star International (aka MSI) is a major motherboard manufacturer whose products are widely used by hobbyists and neighborhood computer manufacturers/assemblers, who in turn would normally use a systembuilder/OEM license for XP.  Computers with proper systembuilder/OEM licenses will have a CoA for that edition of XP affixed to the computer's case.

     

    Given the circumstances you have described, that being this computer is owned by a single individual with no reasonable connection to a medium or larger business, an educational institution, or a government agency, that would own the Product Key used to install XP, although the Product key is Genuine, it's not very likely that this is Genuine installation of XP.

    Friday, October 19, 2007 2:16 AM
  • Thank you very much for our assistance!!

     

    ",,,it's not very likely that this is Genuine installation of XP"

    That is what I thought, and you just confirmed.

     

    Have a great weekend!!

    Friday, October 19, 2007 2:29 AM
  • Can you please tell me is this wersion of windows xp and office 2003 legal?

    Diagnostic Report (1.7.0069.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-Q93K9-C8XDJ-J9TCG
    Windows Product Key Hash: sFmJiSMBugWX1yo57zfs9lYvfSs=
    Windows Product ID: 76487-640-8219026-23129
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {E324F9DE-6D86-4780-A58E-89B724B99F00}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.59.1
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-171-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2920-80070002_025D1FF3-171-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E324F9DE-6D86-4780-A58E-89B724B99F00}</UGUID><Version>1.7.0069.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-J9TCG</PKey><PID>76487-640-8219026-23129</PID><PIDType>1</PIDType><SID>S-1-5-21-1482476501-484763869-839522115</SID><SYSTEM><Manufacturer>FUJITSU SIEMENS</Manufacturer><Model>AMILO Pro Edition V3545 </Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>R01-A0S </Version><SMBIOSVersion major="2" minor="4"/><Date>20070427000000.000000+000</Date></BIOS><HWID>AB0E3507018400EA</HWID><UserLCID>081A</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Europe Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>75EB3898EC09D00</Val><Hash>lkrB2uWJyUMlqGoyCeJ+Z+t1INU=</Hash><Pid>73931-640-6750287-57214</Pid><PidType>14</PidType></Product></Products></Office></Software></GenuineResults>




    Friday, March 21, 2008 9:12 AM
  • Nikola,

     

    All apears well but I have a question for you. Why do you doubt the software? Where did you purchase the software from?  Also are you employed @ a large buisness or is the computer for private use?  Please provide feedback.  Thank you

     

     

    Stephen Holm,

    WGA Forum Volunteer

    Tuesday, April 1, 2008 5:46 AM
  • Thank you. I don't doubt, just checking, and I am employed @ large busines.

    Thank you againe and sorry for my bad english Smile
    Tuesday, April 1, 2008 11:53 AM
  • Nikola,

     

    Please ask your systems administrator to logon to the eOpen site (https://eopen.microsoft.com/EN/default.asp) and confirm what your assigned VLK is for either Office or Windows.  I would like to add one last note about the VLK used to install Office on the PC(s) in question. That is why I suggest that you follow KB 895456 and use the VLK assigned to you.

     

    Sometimes how customers find themselves in this situation is that when their IT department was creating their VL image to be deployed to their desktops, they sometimes inadvertently use an incorrect product key because it was handy. 

     

    Take care,

     

    Stephen Holm

    WGA Forum Volunteer

    Tuesday, April 1, 2008 10:38 PM