[hootsmon7]

Diagnostic Report (1.9.0006.1):
-----------------------------------------
WGA Data-->
Validation Status: Blocked VLK
Validation Code: 3
Online Validation Code: N/A
Cached Validation Code: N/A
Windows Product Key: *****-*****-3R89F-D2KXW-VPK3J
Windows Product Key Hash: Ro/Y7HENE9CfW7lW+QtlNbYQEE8=
Windows Product ID: 76487-640-8365391-23929
Windows Product ID Type: 1
Windows License Type: Volume
Windows OS version: 5.1.2600.2.00010100.3.0.pro
ID: {53CD0649-0E58-453E-A961-35489D65ABC1}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.9.9.1
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-364-80041014_025D1FF3-229-80041014_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-258-3
Resolution Status: N/A
WgaER Data-->
ThreatID(s): N/A
Version: N/A
WGA Notifications Data-->
Cached Result: 3
File Exists: Yes
Version: 1.8.31.9
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: Microsoft
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGATray.exe Signed By: Microsoft
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-543-80070002_025D1FF3-364-80041014_025D1FF3-229-80041014_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{53CD0649-0E58-453E-A961-35489D65ABC1}</UGUID><Version>1.9.0006.1</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VPK3J</PKey><PID>76487-640-8365391-23929</PID><PIDType>1</PIDType><SID>S-1-5-21-1085031214-1644491937-839522115</SID><SYSTEM><Manufacturer>Dell Computer Corporation</Manufacturer><Model>Dimension 8300 </Model></SYSTEM><BIOS><Manufacturer>Dell Computer Corporation</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="3"/><Date>20040927000000.000000+000</Date></BIOS><HWID>8501306F01848153</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.8.31.9"/><File Name="WgaLogon.dll" Version="1.8.31.9"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Licensing Data-->
N/A
HWID Data-->
N/A
OEM Activation 1.0 Data-->
BIOS string matches: yes
Marker string from BIOS: 1B203ell Inc|1B203:Microsoft Corporation
Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005
OEM Activation 2.0 Data-->
N/A

[cwwozniak]

I have asked a moderator to move and add your post to your existing thread here:

http://forums.techguy.org/general-security/818031-help-please.html

[Frank4d]

The report shows your copy of Window is a pirated version. If you believe it should be a genuine version you need to take it up with whoever last installed Windows on the PC.

[hootsmon7]

thanks frank, i bought the computer august last year and its been working fine until thursday and windows was installed and i dont have a disc.

[hootsmon7]

its just looking through net (incl you tube) its seems that this "update" has been causing many problems and there seems to be a way to remove it but, try as i may it will not delete, the wga files (wgatray.exe, then in dllcache same file, then the instruction (now we are in no mans land for me!) you have to click start,run then type in regedit, then a biggy line and ddelete folder wgalogon and all contents (before typing run all the above should be done in safe mode then reboot and and click the run bit

[cwwozniak]

Originally Posted by hootsmon7

i bought the computer august last year ... and i dont have a disc.

.
Did the computer come with a Microsoft Windows Certificate Of Authenticity label attached to the computer case and/or a printed certificate? If not, the seller may have sold you a computer with a pirated copy of Windows.

If it is a pirated copy, this site's rules prohibit helping with problems related to pirated software. You should take up the problem with the seller of the computer.

[hootsmon7]

yeah it did

[cwwozniak]

Does the Certificate Of Authenticity show a key ending in -3R89F-D2KXW-VPK3J ?

[hootsmon7]

cww, i have absolutely no reason to believe this computer has a 'pirate'copy of windows, i bought it last august and its been running great until thursday, but my eldest son has suggested to me that the reg key might have been 'hacked'? is this possible? i have avg and popup blocker installed and use windows firewall

[cwwozniak]

Your listing of the diagnostic report shows that your registration key ends in "-3R89F-D2KXW-VPK3J" A Google search for that text strings turns up many references to Volume License Key (VLK) that has been floating around the Internet for a while:

http://www.google.com/search?q=3R89F...en-US:official

It may be possible for some virus to have hacked the registry to make Windows XP appear to be a pirated copy.

EDIT: If your COA shows a completely different key, there may software available from Microsoft that will allow you to replace the blocked key with the key on the COA.

[Cookiegal]

Your system is showing a Blocked Volume Licence which means the owner of the licence has installed it on more machines that they were allowed to or the licence has been revoked for some reason. You need to take it up with the vendor who sold you the computer or contact Microsoft above making it genuine. There's nothing else we can do here so I'm closing this thread.