Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Spyware changed my product key RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I received the advice from PA Bear on windows xp general discussion forum to run the wga diagnostic and post here.  Recently a users computer got spyware that changed the product key, now WGA states it is invalid.  This computer was purchased in a store or online (can't remember which) and has a valid product key sticker for xp pro on the machine.  Below is the results from the diagnostic

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Geographically blocked PID
    Validation Code: 13
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
    Windows Product ID: 55274-640-8365391-23440
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    ID: {AC6D69CE-59C4-4461-A1AD-B9A7305939F0}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    Windows XP Notifications Data-->
    Cached Result: 13
    File Exists: Yes
    Version: 1.9.40.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    Microsoft Office Project Professional 2003 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{AC6D69CE-59C4-4461-A1AD-B9A7305939F0}</UGUID><Version>1.9.0027.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VPK3J</PKey><PID>55274-640-8365391-23440</PID><PIDType>1</PIDType><SID>S-1-5-21-57989841-115176313-839522115</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>TECRA A8</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer><Version>Version 3.50</Version><SMBIOSVersion major="2" minor="4"/><Date>20070508000000.000000+000</Date></BIOS><HWID>D6623A07018400EA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57914</Pid><PidType>14</PidType></Product><Product GUID="{903B0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Project Professional 2003</Name><Ver>11</Ver><Val>5EA9C3672EB0500</Val><Hash>GZD+9sfb5ecL3RxyV4F75a86u2M=</Hash><Pid>72077-640-0000106-55923</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="3B" Version="11" Result="100"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: yes
    Marker string from BIOS: C018:Semp Toshiba Informatica Ltda|C018:TOSHIBA CORPORATION
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A

     

    Tuesday, June 22, 2010 1:40 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Icccapital,

    The Windows XP Pro installation and the Office Professional 2003 installation on this Toshiba computer are nongenuine because they are volume licensing installations done with blocked Volume Licensing Product Keys.

    The installation of Project Professional 2003 on this computer is a volume licensing installation reporting as Genuine, but it is only Genuine of your organization has a current and valid Volume Licensing Agreement with Microsoft for the use of this product.

    If your organization uses deployment images, just reimage this computer.

    If your organization does not use deployment images, it would be advisable to use the manufacturer's recovery solution to replace the nongenuine and likely compromised installations of Windows and Office with Genuine software that your organization presumably has.

    Otherwise, uninstall both Office and Project and restart twice.  Then use the product key updater utility to see if it can convert the nongenuine Windows XP Pro now on the computer to Genuine Windows XP Pro using the product key on the Toshiba computer's Certificate of Authenticity (CoA).

    http://go.microsoft.com/fwlink/?linkid=45668

    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Tuesday, June 22, 2010 3:13 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Icccapital,

    Both Windows and Office are reporting as nongenuine, and if your organization does not have a current and valid Volume Licensing Agreement with Microsoft for Project Professional 2003, then it, too, is nongenuine.

    Windows:

    Windows Validation Data-->
    Validation Status: Geographically blocked PID
    Validation Code: 13
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
    Windows Product ID: 55274-640-8365391-23440
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    ID: {AC6D69CE-59C4-4461-A1AD-B9A7305939F0}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

     

    Office:

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    Microsoft Office Project Professional 2003 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Tuesday, June 22, 2010 4:43 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Icccapital,

    The Windows XP Pro installation and the Office Professional 2003 installation on this Toshiba computer are nongenuine because they are volume licensing installations done with blocked Volume Licensing Product Keys.

    The installation of Project Professional 2003 on this computer is a volume licensing installation reporting as Genuine, but it is only Genuine of your organization has a current and valid Volume Licensing Agreement with Microsoft for the use of this product.

    If your organization uses deployment images, just reimage this computer.

    If your organization does not use deployment images, it would be advisable to use the manufacturer's recovery solution to replace the nongenuine and likely compromised installations of Windows and Office with Genuine software that your organization presumably has.

    Otherwise, uninstall both Office and Project and restart twice.  Then use the product key updater utility to see if it can convert the nongenuine Windows XP Pro now on the computer to Genuine Windows XP Pro using the product key on the Toshiba computer's Certificate of Authenticity (CoA).

    http://go.microsoft.com/fwlink/?linkid=45668

    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Tuesday, June 22, 2010 3:13 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Okay so the diagnostic is indicating that office is the non-genuine not xp?  Thank you
    Tuesday, June 22, 2010 4:33 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Icccapital,

    Both Windows and Office are reporting as nongenuine, and if your organization does not have a current and valid Volume Licensing Agreement with Microsoft for Project Professional 2003, then it, too, is nongenuine.

    Windows:

    Windows Validation Data-->
    Validation Status: Geographically blocked PID
    Validation Code: 13
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
    Windows Product ID: 55274-640-8365391-23440
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    ID: {AC6D69CE-59C4-4461-A1AD-B9A7305939F0}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

     

    Office:

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    Microsoft Office Project Professional 2003 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Tuesday, June 22, 2010 4:43 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thank you. I will work with that information
    Tuesday, June 22, 2010 6:10 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Icccapital,

    The WGADiag tool shows that your Windows XP installation is a Geographically-blocked PID. This means that your VL Key was issued to an organization that is based in a specific area, in which you cannot use outside of that area. If you work for that organization, you may want to contact their system administrators and get help. Otherwise, you can buy a Get Genuine Kit.

    Wednesday, June 23, 2010 4:59 PM