locked
I have a 100% Legal Version of Windows XP - Now showing not valid. Please Help RRS feed

  • Question

  • I have a 100% Legal Version of Windows XP - Now showing not valid. Please Help. It started last night, possible virus?! Here is the diagnostic tool Information.



    Diagnostic Report (1.9.0011.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Geographically blocked PID
    Validation Code: 13

    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
    Windows Product ID: 76487-640-8365391-23414
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {2047A162-6434-4DA6-AF73-5931FDABD98F}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.40.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 13
    File Exists: Yes
    Version: 1.9.40.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{2047A162-6434-4DA6-AF73-5931FDABD98F}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VPK3J</PKey><PID>76487-640-8365391-23414</PID><PIDType>1</PIDType><SID>S-1-5-21-117609710-1500820517-839522115</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>D945GTP_</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>NT94510J.86A.1348.2005.0609.1737</Version><SMBIOSVersion major="2" minor="3"/><Date>20050609000000.000000+000</Date></BIOS><HWID>440F3707018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65284</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: no
    Marker string from BIOS: N/A
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A
    Monday, August 24, 2009 2:28 PM

Answers

  • Hello Chris Brizz,

    Right now, your computer has a Volume Licensing edition of XP Pro installed (Line 10), and that installation was done with a now-geographically blocked Volume Licensing Key (VLK) (Line 2).  VLKs are blocked by Microsoft at the request of the original keyholder for such reasons as the key was lost, stolen, compromised, misused, or expired.  Also, MS may have blocked the key if it notices a pattern of misuse, ie, more installations of XP using that key than authorized.

    A geographically blocked key is blocked when it is detected in use outside of the worldwide geographic area(s) and/or region(s) covered by its VL Agreement.  The particular Product Key you are using, which ends in 3R89F-D2KXW-VPK3J, is a widely pirated key, and it looks like it recently (end of March, 2009 for time zones other than USA, and very recently for some USA time zones) had a geographic block put on it to try to curb its use, which probably explains why it is showing as Genuine up until recently.

    Also note that the installed license for XP Pro is a Volume License.  As a rule, VL editions of XP should not be sold to individual consumers.  Businesses, schools and gov'ts normally use VL editions for flexibility in installing many computers.  Additionally, VL editions are Upgrade licenses ONLY, and therfore cannot be used as the primary or base license for a computer.

    This is why you were seeing the "software counterfeiting" messages on your computer, because the current installation of XP is an unauthorized installation.

    Regarding Office, please refer to the mgadiag extract below:
    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1

    According to the report, unfortunately your Office installation is also nongenuine, for the same reasons as your Windows installation.  It is an unauthorized installation of a Volume Licensing edition of Office 2003 Professional, and such installation was done with a widely pirated and now-blocked Volume Licensing Key.

    Consumer licenses for XP and Office will always be accompanied by Certificates of Authenticity (CoA), sometimes on the retail box in which retail product was purchased, and other times affixed to the computer (XP) or affixed to the CD folder (Office) when preinstalled by the computer's manufacturer/systembuilder.

    Next look on the computer itself, in the documentation you received with the computer or with your retail purchase of Windows to see if you have Certificate of Authenticity (COAs) for Office and Windows.  If so, tell us about the COAs for XP and Office.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or Media Center, or another version of Windows?  Which edition of Office is printed on the Office CoA?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the full Product Key that may be printed on the CoA.

    Not sure what to look for?  See this page for reference:  http://www.microsoft.com/resources/howtotell/en/coa.mspx

     


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Monday, August 24, 2009 3:00 PM