Microsoft site determines if WinXP is legit.

http://www.microsoft.com/resources/howtotell/ww/windows/default.mspx

What I found more interesting is that if you allow it, the page installs an ActiveX control called ProductIDGatherer.WindowsGather which is contained in a file called ProductIDGather.dll.

I would be interested to know that this ActiveX control actually does.

Originally Posted by ¢ãXC¢ãPTiON™

I would be interested to know that this ActiveX control actually does.

Answer is probably here:
hxxp://www.microsoft.com/licensing/resources/vol/volkeys_winxpsp1.mspx?gssnb=1

Search for: "Access to Windows Update"

does it really work ?

[sf42]

I used Opera with the validation and it gave me an option to download a small program which does the checking. I've attached it so happy disassembling everyone.

I wrote a post/tute? on another forum a while back about my "handoff trick" (for fun) to fake the MS page to "Validate Windows" and download ANY "Genuine Windows Download" file from ANY OS/Browser

Eg. The MS page will congratulate you with:

The Windows validation process has determined that you are running "genuine Microsoft Windows"

even if you are running Linux/Opera

I also know you can simply (currently) press "No" at some of the following pages to get some downloads, but this info is for fun (at the moment) until MS actually removes the "No" option.

Here is an example with background info to get the new updated TCPIP.SYS (KB884020) for WinXP SP2:

To get WindowsXP-KB884020-x86-enu.exe (or other languages, only available to Windows Genuine Advantage) there are several ways WITHOUT installing any ActiveX or downloading GenuineCheck.exe from MS. My tips below could possibly be used for other similar "Windows Genuine Advantage" updates in the future.

KB884020 (new TCPIP.SYS) Windows "Genuine" Decision

http://www.microsoft.com/downloads/winGenuineDecision.aspx?familyid=17d997d2-5034-4bbb-b74d-ad8430a1f7c8&displaylang=en

Gives you three choices:
(1) Yes, please validate Windows and take me to the download. (If an ActiveX dialogue box appears, please click Yes.)
(2) No, do not validate Windows at this time, but take me to the download.
(3) "alternate method" link on bottom of page (no ActiveX) ... Rather than installing the ActiveX control LegitCheckControl.cab you can download and run GenuineCheck.exe (attached by sf42, why sf42? it is freely available from MS)

http://download.microsoft.com/download/A/6/9/A693AA2D-0F3A-47D3-8AC0-70B8ECC3A994/LegitCheckControl.cab
http://download.microsoft.com/download/F/A/2/FA22CFBA-F3CB-49C1-839B-2DEB857B963C/GenuineCheck.exe

If you just want to download, just simply use method (2)

But for this post/tute? I will be going further to show you how to "fake" the MS site into Validating Me WITHOUT using any ActiveX(CAB) or EXE downloads. You just need to "view source" of the PUBLIC website source page:

http://www.microsoft.com/downloads/genuineValidation.aspx

<script language="javascript">
var hash0="YWJF9B8";
...
parent.window.location.replace('handoff.aspx?' + queryStr[1]+'&hash='+ result);
...
</script>

I hope you can already see how simple it is!

What you do for ANY FamilyID=... download is to go to the HANDOFF page by adding the universal hash=YWJF9B8 value. NOTE that the hash0="YWJF9B8" value can change in the page source above so check if it has first (search for hash0) before posting that this example does not work.

In this case:

http://www.microsoft.com/downloads/handoff.aspx?FamilyID=17d997d2-5034-4bbb-b74d-ad8430a1f7c8&displaylang=en&hash=YWJF9B8

You will be congratulated with:

Successfully Validated
The Windows validation process has determined that you are running genuine Microsoft Windows. Please click Download to get the download.

REGARDLESS of OS/Browser. Eg. Linux/Opera works!

You will also be able get all other language downloads from this English displaylang=en page but you could change =en to whatever to go straight to your preferred language page.

This "handoff page and hash" trick can be used for any other FamilyID=... "Genuine Windows Download Only" downloads.

Posting just to let you know (as I mentioned) that the hash value has now changed to XFC8GK5.

So be aware of this. It seems to change daily or so.

nullz, is tehre a way to use that technique to some how use "Windows Update" in other browsers? Like Firefox?