locked
WGA Validation Question RRS feed

  • Question

  • I hope Microsoft can help resolve this issue which has plagued my mother for several months & cost her and several family members a lot of time and some money. She uses a Dell laptop which she purchased new several years ago. It came with a Windows XP operating system installed. There is a "Proof of License/Certificate of Authenticity" sticker on the bottom of the laptop. On the sticker, beneath Windows XP Home Edition is DELL in bold black lettering.

    In March she first received the message that "You may be a victim of software counterfeiting. This copy of Windows did not pass genuine Windows validation." She has been unable to resolve the problem and continues to receive the persistent desktop notifications and the desktop background is black. At one point we came across a recommendation to take up the problem with the computer manufacturer, but a call to Dell proved both costly & unhelpful. Finally, I came across this forum. I downloaded & ran the WGA diagnostic and the results are as follows:

     
     
    Diagnostic Report (1.9.0006.1):
    -----------------------------------------
    WGA Data-->
    Validation Status: Blocked VLK
    Validation Code: 3
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
    Windows Product ID: 76487-640-8365391-23559
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {EC0393A9-BC0F-430D-BBDC-66EEC8B6EC35}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.40.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-230-1
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 3
    File Exists: Yes
    Version: 1.9.40.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{EC0393A9-BC0F-430D-BBDC-66EEC8B6EC35}</UGUID><Version>1.9.0006.1</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VPK3J</PKey><PID>76487-640-8365391-23559</PID><PIDType>1</PIDType><SID>S-1-5-21-1614895754-261478967-1801674531</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>MM061                           </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="4"/><Date>20060609000000.000000+000</Date></BIOS><HWID>F29D32CF0184606E</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>2</stat><msppid></msppid><name>ComputerWorld Maine</name><model>Custom Computer</model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll" Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>9C4BB97BC836F10</Val><Hash>EVpzfhI/CWdzEchzmGgOwmv0Ads=</Hash><Pid>81602-904-0010553-68009</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: yes
    Marker string from BIOS: 4000:Dell Inc|4000:Microsoft Corporation
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A


     
     
    I very much hope that there is a simple remedy to this persistent problem and we would certainly appreciate an explanation as to the reason for this interference with the operating system. Please advise!

    Sincerely,
    Monica

    Wednesday, June 17, 2009 3:24 PM

Answers

  • Good Morning Monica,

    Thank you for visiting the Windows Genuine Advantage (WGA) program forum. Did your parents purchase their laptop new? Did they receive all the original Dell Recovery Media software with the laptop @ the time of purchase? If the system wasn't purchased new where did they purchase the laptop?  We understand the inconvenience you are currently experiencing. Also we have seen numerous issues from customers who were provided a Volume License Key (VLK) on their computer that has either been blocked by Microsoft or generated by a fake product key code generator. WGA currently provides checks for these types of product keys and prompts the user to notify them of this situation. More invalid product keys are being identified daily and WGA is constantly refreshing its database with these newly identified product keys and immediately blocks them. Using your favorite search engine please look up the product key 3R89F-D2KXW-VPK3J identified from the MGA Diagnostic results. As you can tell this key receives many hits. Below is an extract taken from the MGA Diagnostic results.  

    WGA Data-->
    Validation Status: Blocked VLK
    Validation Code: 3
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
    Windows Product ID: 76487-640-8365391-23559
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro


         Currently the laptop is licensed for Windows XP Home based on the Certificate of Authenticity "COA sticker which you mentioned. Right now, the computer has a Volume License (VL) edition of Windows XP Professional identified. The installation was done with a now-blocked Volume License Key (VLK). VLKs are blocked by Microsoft at the request of the original product key holder for various reasons such as the product key was lost, stolen, compromised, misused, or expired. Also, MS may have blocked the key if it notices a pattern of misuse, i.e., more installations of Windows XP Professional using that key than authorized. As a rule, VL editions should not be sold to individual consumers. Businesses, schools and governments normally use VL editions for flexibility in installing many computers.  Also, Volume Licenses for Windows XP is Upgrade licenses ONLY and cannot be used as the original or base license for a new computer.  

        
    Monica have your parents ever had their laptop serviced by a local business or individual? If so this may be a contributing factor.  Customers have taken in their systems for service along with all the software received when purchasing their system. The customer picks up the system and viola’ no problems whatsoever until they need to download an update. Suddenly their system is non-genuine. The customer's computer was not installed with their software but either a blocked Volume Licensing Key (VLK) or a Keygen’d Product Key. Also the software could work for several weeks, months, or even a year or more then suddenly become blocked. 

    You have a couple options available. First you should have been given the option to "Get Genuine" when you failed WGA validation. Here you may purchase an OGA Kit from Microsoft and become genuine. Next I would contact Dell Technical Support @ (800) 624-9896. Briefly explain your situation and request them to mail you the OEM Recovery Media for your parent’s laptop. Once you receive the Recovery Medial you may contact Technical Support again for guidance as how to restore the laptop. Please keep in mind you will first need to back up any files your parents want to keep. Since the telephone number and websites are not maintained by Microsoft we cannot make any warranty as to their validity. 

    Welcome To Dell Support http://support.dell.com/support/index.aspx?c=us&l=en&s=gen

    Dell Community Forums

    http://en.community.dell.com/

    Request Backup Discs

    http://support.dell.com/support/topics/global.aspx/support/dellcare/en/backupcd_form?c=us&cs=19&l=en&s=dhs&redirect=1

    Restoring Your Computer´s Software to the Factory Settings

    http://support.dell.com/support/topics/global.aspx/support/dsn/en/document?c=us&l=en&s=gen&docid=3E48AE3870775D64E040A68F5B2877D4&journalid=42D67CDF2508563DE040A68F5A28695C&Query=&SystemID=&ServiceTag=&contenttype=&os=&component=&lang=&doclang=&toggle=&dl=

    Last I would recommend for you to file a piracy report by following the directions @ http://www.microsoft.com/piracy. Please locate "Reporting Piracy" in the upper left corner.

     

    Thank you


    Stephen

     


        


    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers. Thank you, Stephen Holm
    • Marked as answer by Stephen Holm Wednesday, June 17, 2009 4:56 PM
    Wednesday, June 17, 2009 4:56 PM
  • Hello Periodyssey,

    Yes, that is precisely the typical scenario.  A customer takes their perfectly legal and genuine computer to a shop for a repair or reinstallation, and the shop uses the incorrect method for executing the repair reinstallation.  Such bad practices leave the unsuspecting computer owner with a nongenuine installation of Windows, later to be revealed by the WGA program.

    The real risk in this scenario is the questionable nature of the source of what the shop installs on the computer.  If they use a copy of Windows illegally downloaded on the internet, there is a strong likelihood that this copy would have serious malware programs hidden on the CD ight along with Windows, with the goal being those malware programs operating on Mom's computer to either harvest her financial info or to draft the computer into a "botnet" ( http://en.wikipedia.org/wiki/Botnet ) as a "zombie" ( http://en.wikipedia.org/wiki/Zombie_computer ).

    Because the VLK used for this installation was not blocked up until March, the WGA checks done between last summer and March would have indicated that this was Genuine Windows.  However, any examination of the Windows installation by a competent computer technician would show that it was a Volume License installation of XP Pro when the computer shoudl have had a Dell OEM license for XP Home on it.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Stephen Holm Thursday, June 18, 2009 11:42 PM
    Thursday, June 18, 2009 10:35 PM

All replies

  • Good Morning Monica,

    Thank you for visiting the Windows Genuine Advantage (WGA) program forum. Did your parents purchase their laptop new? Did they receive all the original Dell Recovery Media software with the laptop @ the time of purchase? If the system wasn't purchased new where did they purchase the laptop?  We understand the inconvenience you are currently experiencing. Also we have seen numerous issues from customers who were provided a Volume License Key (VLK) on their computer that has either been blocked by Microsoft or generated by a fake product key code generator. WGA currently provides checks for these types of product keys and prompts the user to notify them of this situation. More invalid product keys are being identified daily and WGA is constantly refreshing its database with these newly identified product keys and immediately blocks them. Using your favorite search engine please look up the product key 3R89F-D2KXW-VPK3J identified from the MGA Diagnostic results. As you can tell this key receives many hits. Below is an extract taken from the MGA Diagnostic results.  

    WGA Data-->
    Validation Status: Blocked VLK
    Validation Code: 3
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
    Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
    Windows Product ID: 76487-640-8365391-23559
    Windows Product ID Type: 1
    Windows License Type: Volume
    Windows OS version: 5.1.2600.2.00010100.3.0.pro


         Currently the laptop is licensed for Windows XP Home based on the Certificate of Authenticity "COA sticker which you mentioned. Right now, the computer has a Volume License (VL) edition of Windows XP Professional identified. The installation was done with a now-blocked Volume License Key (VLK). VLKs are blocked by Microsoft at the request of the original product key holder for various reasons such as the product key was lost, stolen, compromised, misused, or expired. Also, MS may have blocked the key if it notices a pattern of misuse, i.e., more installations of Windows XP Professional using that key than authorized. As a rule, VL editions should not be sold to individual consumers. Businesses, schools and governments normally use VL editions for flexibility in installing many computers.  Also, Volume Licenses for Windows XP is Upgrade licenses ONLY and cannot be used as the original or base license for a new computer.  

        
    Monica have your parents ever had their laptop serviced by a local business or individual? If so this may be a contributing factor.  Customers have taken in their systems for service along with all the software received when purchasing their system. The customer picks up the system and viola’ no problems whatsoever until they need to download an update. Suddenly their system is non-genuine. The customer's computer was not installed with their software but either a blocked Volume Licensing Key (VLK) or a Keygen’d Product Key. Also the software could work for several weeks, months, or even a year or more then suddenly become blocked. 

    You have a couple options available. First you should have been given the option to "Get Genuine" when you failed WGA validation. Here you may purchase an OGA Kit from Microsoft and become genuine. Next I would contact Dell Technical Support @ (800) 624-9896. Briefly explain your situation and request them to mail you the OEM Recovery Media for your parent’s laptop. Once you receive the Recovery Medial you may contact Technical Support again for guidance as how to restore the laptop. Please keep in mind you will first need to back up any files your parents want to keep. Since the telephone number and websites are not maintained by Microsoft we cannot make any warranty as to their validity. 

    Welcome To Dell Support http://support.dell.com/support/index.aspx?c=us&l=en&s=gen

    Dell Community Forums

    http://en.community.dell.com/

    Request Backup Discs

    http://support.dell.com/support/topics/global.aspx/support/dellcare/en/backupcd_form?c=us&cs=19&l=en&s=dhs&redirect=1

    Restoring Your Computer´s Software to the Factory Settings

    http://support.dell.com/support/topics/global.aspx/support/dsn/en/document?c=us&l=en&s=gen&docid=3E48AE3870775D64E040A68F5B2877D4&journalid=42D67CDF2508563DE040A68F5A28695C&Query=&SystemID=&ServiceTag=&contenttype=&os=&component=&lang=&doclang=&toggle=&dl=

    Last I would recommend for you to file a piracy report by following the directions @ http://www.microsoft.com/piracy. Please locate "Reporting Piracy" in the upper left corner.

     

    Thank you


    Stephen

     


        


    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers. Thank you, Stephen Holm
    • Marked as answer by Stephen Holm Wednesday, June 17, 2009 4:56 PM
    Wednesday, June 17, 2009 4:56 PM
  • Hi Stephen,

    Thank you for your response. Can you explain why the Windows Product Key in the Diagnostic results does not match the product key on the COA?

    In the meantime, I will check on the other questions you asked about where the computer was purchased & where it has been serviced.

    Sincerely,
    Monica
    Thursday, June 18, 2009 2:08 PM
  • Morning Monica,

    Unfortunately I don't know all the details as why the product key from the MGA Diagnostic results don't match the product key on the COA. This is why I asked if the computer had ever been turned in for service. Please see below the difference between OEM SLP vs. COA SLP Windows installs. Hopefully this will provide details as how Windows are pre-installed @ by OEMs. 



    OEM-SLP: Computers built by large commercial manufacturers that come with Vista Pre-installed come with two (2) Product Keys; SLP and COA Key.  SLP stands for System Locked Pre-install. OEM manufacturer’s add an OEM identifier string to the system BIOS during manufacturing. Windows verifies this identifier during the boot process. In this way the end user will not be required to activate Windows. The OEM SLP Key is geared to work with the special instructions found on that Manufacturer’s computer hardware.  The Product Key is available on the COA sticker and not installed in the computer. For example all DELL OEM SLP Windows Vista systems use a single product key but the COA sticker on the machine contains the unique COA. The key located on the COA sticker should only be used in limited situations and requires telephone activation. Example should you require to reformate the computer the key from the COA sticker would be used.


    Thank you again Monica :-)


    Stephen

    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers. Thank you, Stephen Holm
    Thursday, June 18, 2009 4:31 PM
  • Hi Periodyssey,

    The blocked Product Key used to do the current installation of XP Pro on your Mom's Dell laptop was blocked by Microsoft sometime in mid-March, so that makes sense that her computer did not start displaying these messages until about that time or shortly thereafter.

    Your Mom's Dell came from Dell with XP Home, but now it has XP Pro on it.  However that changed happened is the "smoking gun" for why the installation of XP on the laptop is now coming up as nongenuine.

    The solution to the problem is not difficult but it can be time consuming.  Use the Dell-supplied XP Home Operating System Reinstallation CD to do a clean installation of XP Home onto the laptop.  Note that a clean installation will destroy all user data, so be sure to take steps to backup and offload anything that Mom does not want to lose such as pics, music, email, documents, personal financial software data files, etc etc.  An external hard disk drive or an inexpensive flash drive are ideal for doing this task.

    If Mom misplaced or did not get the Dell Reinstallation CD, Stephen posted the links at Dell.com to follow to order new ones.  Stephen also posted links at Dell support that give you step by step instructions on how to use the Reinstallation CD.

    Good Luck!


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    Thursday, June 18, 2009 4:43 PM
  • Hi Stephen,

    Do I understand you correctly that installing or reinstalling the operating system is the only way the Windows product key would be affected? The product key cannot be affected by a virus or other interference?

    Do I also infer correctly that a manufacturer such as Dell can sell a new laptop with Windows pre-installed, using OEM software, and the operating system's product key would differ from the one stated on the COA sticker? If this is the case, how does one determine the OEM-SLP product key?

    And/or is it accurate to say that this problem would be less likely to originate with a large manufacturer such as Dell, and more likely arise with a small local company that services equipment, in the event that the operating system needs to be reinstalled after a crash and the owner's Windows XP disk is not available?

    I'm trying to understand this situation fully. Thank you for your help.

    Monica
    Thursday, June 18, 2009 4:58 PM
  • Hi Dan,

    Thanks for your reply. Is this the indication in the diagnostic that she is now running Windows XP Pro:

    Windows OS version: 5.1.2600.2.00010100.3.0.pro

    Is it possible that the OS was reinstalled using a volume license key some time ago (she had some work done on the laptop last summer and was not happy with the shop for a variety of reasons) and didn't notice any change until Microsoft blocked that license key in March?

    Thanks,
    Monica
    Thursday, June 18, 2009 8:48 PM
  • Hello Periodyssey,

    Yes, that is precisely the typical scenario.  A customer takes their perfectly legal and genuine computer to a shop for a repair or reinstallation, and the shop uses the incorrect method for executing the repair reinstallation.  Such bad practices leave the unsuspecting computer owner with a nongenuine installation of Windows, later to be revealed by the WGA program.

    The real risk in this scenario is the questionable nature of the source of what the shop installs on the computer.  If they use a copy of Windows illegally downloaded on the internet, there is a strong likelihood that this copy would have serious malware programs hidden on the CD ight along with Windows, with the goal being those malware programs operating on Mom's computer to either harvest her financial info or to draft the computer into a "botnet" ( http://en.wikipedia.org/wiki/Botnet ) as a "zombie" ( http://en.wikipedia.org/wiki/Zombie_computer ).

    Because the VLK used for this installation was not blocked up until March, the WGA checks done between last summer and March would have indicated that this was Genuine Windows.  However, any examination of the Windows installation by a competent computer technician would show that it was a Volume License installation of XP Pro when the computer shoudl have had a Dell OEM license for XP Home on it.
    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by Stephen Holm Thursday, June 18, 2009 11:42 PM
    Thursday, June 18, 2009 10:35 PM
  • Hello Monica,

    Thank you for letting us know the computer was serviced last summer. This appears to be the missing link as Dan indicated. Also I had asked this in my previous posting. Customer have reported this numerious of times on our forums. It is sad there are unscrupulous people who do this type of work on their customer's computers. A few months later viola' the computer is now blocked. 

    Also as Dan mentioned the software bits potentially contain very nasty maleware that can do very bad things. I would recommend for you to file a piracy report regarding your experience. Next use the Dell Recovery Media disc and follow the steps I provided previously. 


    Hopefully Dan and I were able to answer all of your questions.


    Thank you again Monica and take care,


    Stephen
    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own which will help minimize confusion. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers. Thank you, Stephen Holm
    Thursday, June 18, 2009 11:42 PM