none
Genuine key - Geographically blocked PID RRS feed

  • Question

  • My computer just suffered some nasty trojans and at least 2 rootkits and has been repaired

    A couple of days after I started getting failed Windows validation messages. I checked using the MGA tool and got this:

    Diagnostic Report (1.9.0006.1): 
    ----------------------------------------- 
    WGA Data--> 
    Validation Status: Geographically blocked PID 
    Validation Code: 13 
    Online Validation Code: N/A 
    Cached Validation Code: N/A 
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J 
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8
    Windows Product ID: 76487-640-8365391-23067 
    Windows Product ID Type: 1 
    Windows License Type: Volume 
    Windows OS version: 5.1.2600.2.00010100.3.0.pro 
    ID: {F550C52B-80CC-4013-B1ED-B441B2272F27}(3) 
    Is Admin: Yes 
    TestCab: 0x0 
    WGA Version: Registered, 1.9.9.1 
    Signed By: Microsoft 
    Product Name: N/A 
    Architecture: N/A 
    Build lab: N/A 
    TTS Error: N/A 
    Validation Diagnostic: 025D1FF3-230-1_025D1FF3-238-2_025D1FF3-258-3 
    Resolution Status: N/A 
     
    WgaER Data--> 
    ThreatID(s): N/A 
    Version: N/A 
     
    WGA Notifications Data--> 
    Cached Result: 13 
    File Exists: Yes 
    Version: 1.8.31.9 
    WgaTray.exe Signed By: Microsoft 
    WgaLogon.dll Signed By: Microsoft 
     
    OGA Notifications Data--> 
    Cached Result: N/A, hr = 0x80070002 
    Version: N/A, hr = 0x80070002 
    WGATray.exe Signed By: Microsoft 
    OGAAddin.dll Signed By: N/A, hr = 0x80070002 
     
    OGA Data--> 
    Office Status: 103 Blocked VLK 
    Microsoft Office Professional Plus 2007 - 103 Blocked VLK 
    OGA Version: N/A, 0x80070002 
    Signed By: N/A, hr = 0x80070002 
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_025D1FF3-238-2_025D1FF3-258-3 
     
    Browser Data--> 
    Proxy settings: N/A 
    User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32) 
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe 
    Download signed ActiveX controls: Prompt 
    Download unsigned ActiveX controls: Disabled 
    Run ActiveX controls and plug-ins: Allowed 
    Initialize and script ActiveX controls not marked as safe: Disabled 
    Allow scripting of Internet Explorer Webbrowser control: Disabled 
    Active scripting: Allowed 
    Script ActiveX controls marked as safe for scripting: Allowed 
     
    File Scan Data--> 
     
    Other data--> 
    Office Details: <GenuineResults><MachineData><UGUID>{F550C52B-80CC-4013-B1ED-B441B2272F27}</UGUID><Version>1.9.0006.1</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VPK3J</PKey><PID>76487-640-8365391-23067</PID><PIDType>1</PIDType><SID>S-1-5-21-1343024091-1004336348-682003330</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>P5E</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0605   </Version><SMBIOSVersion major="2" minor="4"/><Date>20080304000000.000000+000</Date></BIOS><HWID>759B35F701842E7B</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.8.31.9"/><File Name="WgaLogon.dll" Version="1.8.31.9"/></GANotification></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>C0A25836FDBE5AC</Val><Hash>FmDbcrRY1pTOcrz4ZUZRHhpUuc0=</Hash><Pid>89409-726-2958074-65804</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>   
     
    Licensing Data--> 
    N/A 
     
    HWID Data--> 
    N/A 
     
    OEM Activation 1.0 Data--> 
    BIOS string matches: yes 
    Marker string from BIOS: 14A10:ASUSTeK Computer Inc|16100:GENUINE C&C INC 
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005 
     
    OEM Activation 2.0 Data--> 
    N/A 
     
     

    From reading a few threads here it is obvious to me that windows has been repaired using a vlk which does not match my genuine sticker

    I have tried using the 'windows product key update tool' (failed ) and also by running the activation wizard by running '%systemroot%\system32\oobe\msoobe.exe /a' (I phoned the activation line and was advised to change the product key. This failed and I was told to return to my reseller)

    My PC is a homebuild and the product key I am trying to use is from an old PC which has been scrapped. It is running Windows XP PRo. As mentioned I have a genuine sticker and the product key is not being used by any other pc that I know of. The sticker is a 'blue' as described at http://www.microsoft.com/resources/howtotell/Popup.aspx?coaID=coa_2&displaylang=en and bears the manufacturer name Evesham (who made the original PC I bought way back)

    Additionally I tried to roll my pc back to sp2, as that is the install disk version I have. I was unable to do this as there is no entry in the add/remove program list. I have tried the various other methods suggested by MS but there is no c:\windows\$NtServicePackUninstall$ folder. So I would guess a SP3 install disk has been used

    I don't have any restore points prior to the repair

    Tearing my hair out now as I want to get my pc back to genuine before I get locked out. Would be obliged for any advice you can give me
    Thursday, March 5, 2009 1:45 PM

Answers

  • Good Morning Johnyy,


    Right now, your computer has a Volume Licensing edition of XP Pro installed (Line 10), and that installation was done with a now-geographically blocked Volume Licensing Key (VLK) (Line 2).  VLKs are blocked by Microsoft at the request of the original key holder for such reasons as the key was lost, stolen, compromised, misused, or expired.  Also, Microsoft may have blocked the key if it notices a pattern of misuse, i.e., more installations of XP using that key than authorized.

    A geographically blocked key is blocked when it is detected in use outside of the worldwide geographic area(s) covered by its VL Agreement.  The particular Product Key you are using, which ends in 3R89F-D2KXW-VPK3J, is a widely used key, and it looks like it recently had a geographic block put on it to try to curb its use, which probably explains why it was showing as Genuine up until recently.

    As a rule, VL editions of XP should not be sold to individual consumers.  Businesses, schools and governments normally use VL editions for flexibility in installing many computers.  Additionally, VL editions are Upgrade licenses ONLY, and therefore cannot be used as the primary or base license for a computer.

    This is why you were seeing the "software counterfeiting" messages on your computer, because the current installation of XP is an unauthorized installation.

    Look on the computer or in the materials that came with your computer to see if you have a Certificate of Authenticity (CoA).  If you have one, tell us about the CoA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or another version or edition of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the Product Key printed on the CoA.

    5.  Windows XP purchased in retail packaging will have the CoA on the retail package box top, and will have the Product Key on a yellow-orange label affixed to the CD holder folder inside the box.

    Not sure what to look for?  Click here: 
    http://www.microsoft.com/resources/howtotell/en/coa.mspx

     

    Thank you

    Stephen

    Stephen Holm
    • Marked as answer by Stephen Holm Thursday, March 5, 2009 7:12 PM
    Thursday, March 5, 2009 7:11 PM
  • Hello Johnyy,

    First you mentioned your computer suffered some nasty trojans and @ least 2 rootkits. Curious how did you repair the computer? 
    PC Safety and Security is important. The best way for eradicating malware infections is to re-image your computer. More importantly it may provide you with a better peace of mind overall. Johnyy I do understand why you are reticent regarding a complete re-install. In the past I have helped to eradicate malware for friends which ended with a complete re-install. It is almost like chasing a needle in a haystack.

    Let me clairfy so I understand correctly your scenerio.  You mentioned the current computer is home built. Next you are using the product key taken from the old Evesham OEM built system and trying to use this on the home built system. Am I understanding this correctly? If this is correct you can not transfer the OEM-SLP product key because it is tied to the Evesham system. Again I would like to provide you with clairfication regarding OEM-SLP means.

    OEM-SLP:
    Computers built by large commercial manufacturers that come with Vista Pre-installed come with two (2) Product Keys; SLP and COA Key.  SLP stands for System Locked Pre-install. OEM manufacturer’s add an OEM identifier string to the system BIOS during manufacturing. Windows verifies this identifier during the boot process. In this way the end user will not be required to activate Windows. The OEM SLP Key is geared to work with the special instructions found on that Manufacturer’s computer hardware.  The Product Key is available on the COA sticker and not installed in the computer. For example all DELL OEM SLP Windows Vista systems use a single product key but the COA sticker on the machine contains the unique COA. The key located on the COA sticker should only be used in limited situations and requires telephone activation. Example should you require to reformate the computer the key from the COA sticker would be used. 

    I iunderstand your computer did not come with Vista. My previous post I was explaining some options you currently have so you may become Genuine. The last fifteen alpha/numeric characters of your product key as outlined from the MGA results is:


    3R89F-D2KXW-VPK3J 

    The Product Key found on your computer has been detected on multiple computers. Product keys are only allowed to be used on one computer unless otherwise specified in the End User Licensing Agreement (EULA).   You will find numerous sites where this Product Key has been posted.  Use your favorite search engine and paste in the Product Key.    


    Johnyy hopfully I have been able to provide you with more information surrounding what you are experiencing. 



    Take care,


    Stephen
     


    Stephen Holm Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers.
    • Marked as answer by Stephen Holm Thursday, March 5, 2009 10:15 PM
    Thursday, March 5, 2009 10:15 PM

All replies

  • Good Morning Johnyy,


    Right now, your computer has a Volume Licensing edition of XP Pro installed (Line 10), and that installation was done with a now-geographically blocked Volume Licensing Key (VLK) (Line 2).  VLKs are blocked by Microsoft at the request of the original key holder for such reasons as the key was lost, stolen, compromised, misused, or expired.  Also, Microsoft may have blocked the key if it notices a pattern of misuse, i.e., more installations of XP using that key than authorized.

    A geographically blocked key is blocked when it is detected in use outside of the worldwide geographic area(s) covered by its VL Agreement.  The particular Product Key you are using, which ends in 3R89F-D2KXW-VPK3J, is a widely used key, and it looks like it recently had a geographic block put on it to try to curb its use, which probably explains why it was showing as Genuine up until recently.

    As a rule, VL editions of XP should not be sold to individual consumers.  Businesses, schools and governments normally use VL editions for flexibility in installing many computers.  Additionally, VL editions are Upgrade licenses ONLY, and therefore cannot be used as the primary or base license for a computer.

    This is why you were seeing the "software counterfeiting" messages on your computer, because the current installation of XP is an unauthorized installation.

    Look on the computer or in the materials that came with your computer to see if you have a Certificate of Authenticity (CoA).  If you have one, tell us about the CoA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or another version or edition of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the Product Key printed on the CoA.

    5.  Windows XP purchased in retail packaging will have the CoA on the retail package box top, and will have the Product Key on a yellow-orange label affixed to the CD holder folder inside the box.

    Not sure what to look for?  Click here: 
    http://www.microsoft.com/resources/howtotell/en/coa.mspx

     

    Thank you

    Stephen

    Stephen Holm
    • Marked as answer by Stephen Holm Thursday, March 5, 2009 7:12 PM
    Thursday, March 5, 2009 7:11 PM
  • Thank you for your reply which confirms what i already suspected. The information you have requested was included above:

    "My PC is a homebuild and the product key I am trying to use is from an old PC which has been scrapped. It is running Windows XP PRo. As mentioned I have a genuine sticker and the product key is not being used by any other pc that I know of. The sticker is a 'blue' as described at http://www.microsoft.com/resources/howtotell/Popup.aspx?coaID=coa_2&displaylang=en and bears the manufacturer name Evesham (who made the original PC I bought way back)"
    Thursday, March 5, 2009 7:22 PM
  • Johnyy,

    Unfortunately you can not use the Product Key which was used on the Evesham Computer. OEM Manufacturers use an OEM-SLP version of windows. Let me explain what OEM-SLP.  

    OEM-SLP: Computers built by large commercial manufacturers that come with Vista Pre-installed come with two (2) Product Keys; SLP and COA Key.  SLP stands for System Locked Pre-install. OEM manufacturer’s add an OEM identifier string to the system BIOS during manufacturing. Windows verifies this identifier during the boot process. In this way the end user will not be required to activate Windows. The OEM SLP Key is geared to work with the special instructions found on that Manufacturer’s computer hardware.  The Product Key is available on the COA sticker and not installed in the computer. For example all DELL OEM SLP Windows Vista systems use a single product key but the COA sticker on the machine contains the unique COA. The key located on the COA sticker should only be used in limited situations and requires telephone activation. Example should you require to reformate the computer the key from the COA sticker would be used. 

    Hopefully this will provide you with more of an explaination. There are other options available though. First you can purchase a "WGA Kit" which should have been presented to you when you failed validation. This is a retail version of Windows XP Professional. Unfortunately XP is not offered for resale so it will be hard for you to purchase XP from a local source unless they have it still on their shelves. The other option would be to purchaes Vista. 


    Take care,

    Stephen


    Stephen Holm
    Thursday, March 5, 2009 7:52 PM
  • Interesting but does not seem relevant for a number of reasons

    1. My PC did not come with Vista. My original machine came with XP (SP2 I think)
    2. The motherboard I am presently using did not come with the original machine. This is relevant because I have been using my original product key until a couple of days ago and prior to this had no wga problems. Indeed I reinstalled Windows a few months ago, and so the product key was working fine.

     I did recently install the beta of Windows 7 on a seperate partition and wonder if somehow this is interfering

    Whilst I could clean install XP Pro SP2 I am sure you will understand that I am reticent to lose all my program settings and have to reinstall everything again. Surely there is a means to use my genuine product key without having all that hassle?
    Thursday, March 5, 2009 9:25 PM
  • Hello Johnyy,

    First you mentioned your computer suffered some nasty trojans and @ least 2 rootkits. Curious how did you repair the computer? 
    PC Safety and Security is important. The best way for eradicating malware infections is to re-image your computer. More importantly it may provide you with a better peace of mind overall. Johnyy I do understand why you are reticent regarding a complete re-install. In the past I have helped to eradicate malware for friends which ended with a complete re-install. It is almost like chasing a needle in a haystack.

    Let me clairfy so I understand correctly your scenerio.  You mentioned the current computer is home built. Next you are using the product key taken from the old Evesham OEM built system and trying to use this on the home built system. Am I understanding this correctly? If this is correct you can not transfer the OEM-SLP product key because it is tied to the Evesham system. Again I would like to provide you with clairfication regarding OEM-SLP means.

    OEM-SLP:
    Computers built by large commercial manufacturers that come with Vista Pre-installed come with two (2) Product Keys; SLP and COA Key.  SLP stands for System Locked Pre-install. OEM manufacturer’s add an OEM identifier string to the system BIOS during manufacturing. Windows verifies this identifier during the boot process. In this way the end user will not be required to activate Windows. The OEM SLP Key is geared to work with the special instructions found on that Manufacturer’s computer hardware.  The Product Key is available on the COA sticker and not installed in the computer. For example all DELL OEM SLP Windows Vista systems use a single product key but the COA sticker on the machine contains the unique COA. The key located on the COA sticker should only be used in limited situations and requires telephone activation. Example should you require to reformate the computer the key from the COA sticker would be used. 

    I iunderstand your computer did not come with Vista. My previous post I was explaining some options you currently have so you may become Genuine. The last fifteen alpha/numeric characters of your product key as outlined from the MGA results is:


    3R89F-D2KXW-VPK3J 

    The Product Key found on your computer has been detected on multiple computers. Product keys are only allowed to be used on one computer unless otherwise specified in the End User Licensing Agreement (EULA).   You will find numerous sites where this Product Key has been posted.  Use your favorite search engine and paste in the Product Key.    


    Johnyy hopfully I have been able to provide you with more information surrounding what you are experiencing. 



    Take care,


    Stephen
     


    Stephen Holm Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers.
    • Marked as answer by Stephen Holm Thursday, March 5, 2009 10:15 PM
    Thursday, March 5, 2009 10:15 PM
  • Hello guys,
    Even i had the error on my activation of windows 7 ultimate edition, the simple workaround is to go login to your Router login url http://192.168.1.1/ (URL changes depend upon router manufacture) 

    login with username: admin password: password or admin

    then go and disable DHCP once done click save and reboot your Modem. Once done re-try windows activation this would work perfectly.

    What happens when you buy OS which has "activation on geographic locations" Microsoft check's with your ISP info, if your DHCP is on then it gives you IP as 192.168.1.3 something like that and Microsoft using that IP can't fetch your ISP details.

    Regards,
    ZAK
    www.iloveuzak.com
    Saturday, October 24, 2009 7:08 AM
  • Hello Zahed Ali,

    The information you posted is irrelevant to the original poster's Geographically Blocked PID issue.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Sunday, October 25, 2009 2:51 AM
  • Yes, wasn't making anysence. Just an efforts though...
    Sunday, October 25, 2009 6:23 AM