WGA Fails to Validate Afet Validating Previously

Saturday, 13 May 2006 6:25 PM

0

Trying to update computer but WGA fails to install now but did install in past for updates.
Everytime it happens when trying to use Microsoft update site.
Ran All update up to installing sp-2 which installed correctly then problem started after SP-2 installed o.k..
Ran WGA online tool and set all to correct settings, It was not allowing contact to Server Sites. Added all MS update sites listed as trusted sites to get it to allow connecting to servers for update (which is where it initially failed testing). Also ensured ports 80 and 443 were opened.
This computer was infected with numerous viruses, worms and Malware which was removed ( NEW.Net malware X2, VB-MT worm x15, DYFUCA, Agent SA Trojan-bk x6, QooLogic worm X20, newname11, newname13, VB-LP worm, Dialer566, and a few more. System restore is currently turned off.

Here is Diagnostic tool report copied from it:

WGA Diagnostic Data (1.5.0526.1):
--------------------
Genuine Validation Status: Genuine
Windows Product Key: *****-*****-8CKWB-CXDTR-2QQ2J
Windows Product Key Hash: TADMCQnYLLdSJMiVO1hOTdRo2tA=
Windows Product ID: 55277-OEM-2146976-87151
Windows Product ID Type: 3
Windows License Type: COA/Sysem Builder
Windows OS version: 5.1.2600.2.00010300.2.0.hom
Download Center code: MMJP77F
ID: 993a2ee9-5a8c-452f-8656-838850676380
Is Admin: Yes
AutoDial: No
Registry: 0x0
WGA Version: Registered, 1.5.526.0.
Signature Type: Microsoft.
Validation Diagnostic:

Scan: Complete
Cryptography: Complete

Office Status: 109
Office Diagnostics:

Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

Office Details: <GenuineResults><MachineData><UGUID>993a2ee9-5a8c-452f-8656-838850676380</UGUID><Version>1.5.0526.1</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><PID>55277-OEM-2146976-87151</PID><PIDType>3</PIDType><SID>S-1-5-21-1597234714-473866232-3689853989</SID><SYSTEM><Manufacturer>ECS</Manufacturer><Model>M810DLU</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>07.00T</Version><SMBIOSVersion major="2" minor="3"/><Date>20010402000000.000000+000</Date></BIOS><HWID>270001020202010001010101001C8C700A1F0C6811F009F08B0C070AF05839B0425BF065CF0000</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone></MachineData> <Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults>
So Whats Up?
- Reply
- Quote

All Replies

Saturday, 13 May 2006 10:01 PM

Answerer

0

A computer that was infected with "numerous viruses, worms and Malware" is still a secuity-compromised computer. Even though you may have removed the viruses, worms and malware files, there is no way to tell just how the system files and permissions have changed. I would suggest performing a "clean install" of Windows XP.

Why?

Read the following: Viruses - I feel your pain http://blogs.msdn.com/larryosterman/archive/2004/06/18/159482.aspx

Clean Install Windows XP http://www.michaelstevenstech.com/cleanxpinstall.html
- Reply
- Quote

Sunday, 14 May 2006 6:10 AM

Dave1ee wrote:

Trying to update computer but WGA fails to install now but did install in past for updates.
Everytime it happens when trying to use Microsoft update site.
Ran All update up to installing sp-2 which installed correctly then problem started after SP-2 installed o.k..
Ran WGA online tool and set all to correct settings, It was not allowing contact to Server Sites. Added all MS update sites listed as trusted sites to get it to allow connecting to servers for update (which is where it initially failed testing). Also ensured ports 80 and 443 were opened.
This computer was infected with numerous viruses, worms and Malware which was removed ( NEW.Net malware X2, VB-MT worm x15, DYFUCA, Agent SA Trojan-bk x6, QooLogic worm X20, newname11, newname13, VB-LP worm, Dialer566, and a few more. System restore is currently turned off.

Here is Diagnostic tool report copied from it:

WGA Diagnostic Data (1.5.0526.1):
--------------------
Genuine Validation Status: Genuine
Windows Product Key: *****-*****-8CKWB-CXDTR-2QQ2J
Windows Product Key Hash: TADMCQnYLLdSJMiVO1hOTdRo2tA=
Windows Product ID: 55277-OEM-2146976-87151
Windows Product ID Type: 3
Windows License Type: COA/Sysem Builder
Windows OS version: 5.1.2600.2.00010300.2.0.hom
Download Center code: MMJP77F
ID: 993a2ee9-5a8c-452f-8656-838850676380
Is Admin: Yes
AutoDial: No
Registry: 0x0
WGA Version: Registered, 1.5.526.0.
Signature Type: Microsoft.
Validation Diagnostic:

Scan: Complete
Cryptography: Complete

Office Status: 109
Office Diagnostics:

Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

Office Details: <GenuineResults><MachineData><UGUID>993a2ee9-5a8c-452f-8656-838850676380</UGUID><Version>1.5.0526.1</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><PID>55277-OEM-2146976-87151</PID><PIDType>3</PIDType><SID>S-1-5-21-1597234714-473866232-3689853989</SID><SYSTEM><Manufacturer>ECS</Manufacturer><Model>M810DLU</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>07.00T</Version><SMBIOSVersion major="2" minor="3"/><Date>20010402000000.000000+000</Date></BIOS><HWID>270001020202010001010101001C8C700A1F0C6811F009F08B0C070AF05839B0425BF065CF0000</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone></MachineData> <Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults>
So Whats Up?

Dave:

Can you please walk me through how you are failing? By the diagnostics output, you should be genuine.

-Phil Liu

Tuesday, 16 May 2006 7:45 PM

It Fails when trying to re-install the WGA package from the Windows update site. In my opinion once it has been verified it should not have to be re-verified ech time to the site. Just my 2 cents worth.

Dave

Tuesday, 16 May 2006 8:59 PM

Dave:

Is there an error message that you're recieving when failure to install? I'm sorry for the inconvenience caused, but we constantly update and tweak our genuine validation checks, which is why we have users validate again.

Looking at your browser settings (from the diagnostics tool), they look to be just fine.

I suggest to create a free on line support case for this WGA issue at:

http://support.microsoft.com/oas/default.aspx?&c1=509&gprid=9860&

I hope this helps!
-Phil Liu