none
Product ID changed by virus RRS feed

  • Question

  • I had a problem with a trojan horse that has damaged the windows product id. The diagnostic tool reports;

     

    Diagnostic Report (1.7.0110.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: PID is invalid
    Validation Code: 5
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-JFGBR-8CYQ6-TWVYH
    Windows Product Key Hash: hZwqnD5CkNx45H2hMRuDdSSqs+U=
    Windows Product ID: 76488-022-2109144-22789
    Windows Product ID Type: 0
    Windows License Type: Unknown
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    ID: {2484B1B9-DBDD-4244-A71A-699E6EE0B4EA}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.8.31.9
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-171-1_025D1FF3-85-80004005
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 5
    File Exists: Yes
    Version: 1.8.31.9
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Ultimate 2007 - 100 Genuine
    OGA Version: Registered, 1.6.28.0
    Signed By: Microsoft
    Office Diagnostics: 7E90FEE8-197-80004005_B4D0AA8B-692-80004005_77F760FE-153-80070002_7E90FEE8-203-80070002_B4D0AA8B-709-645_B4D0AA8B-709-645_B4D0AA8B-709-645_025D1FF3-171-1_025D1FF3-85-80004005_672A8F41-307-80004005_672A8F41-349-80004005_672A8F41-244-80004005_672A8F41-307-80004005_672A8F41-349-80004005_672A8F41-244-80004005_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_FA827CE6-153-8007007e

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{2484B1B9-DBDD-4244-A71A-699E6EE0B4EA}</UGUID><Version>1.7.0110.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-TWVYH</PKey><PID>76488-022-2109144-22789</PID><PIDType>0</PIDType><SID>S-1-5-21-436374069-1078145449-1801674531</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1006.003</Version><SMBIOSVersion major="2" minor="3"/><Date>20040705000000.000000+000</Date></BIOS><HWID>7FCE322701848063</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Australia Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002E-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Ultimate 2007</Name><Ver>12</Ver><Val>63816EFA7A88F0A</Val><Hash>uetSk4oEnahpNwYciYcgiVYcsus=</Hash><Pid>81608-901-1626015-65382</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Licensing Data-->
    N/A

    HWID Data-->
    N/A

    OEM Activation 1.0 Data-->
    BIOS string matches: yes
    Marker string from BIOS: 1C051:GENUINE C&C INC
    Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005

    OEM Activation 2.0 Data-->
    N/A



    Is there a fix for this without reinstalling windows?



    Saturday, October 25, 2008 6:35 AM

Answers

  • Run the tool for updating your product key at:

    http://www.microsoft.com/genuine/selfhelp/XPPkuinst.aspx
    • Proposed as answer by motherboardlove Sunday, October 26, 2008 12:45 AM
    • Unproposed as answer by RickImAPC Monday, October 27, 2008 2:47 PM
    • Marked as answer by RickImAPC Monday, October 27, 2008 2:47 PM
    Saturday, October 25, 2008 7:34 PM

All replies

  • Run the tool for updating your product key at:

    http://www.microsoft.com/genuine/selfhelp/XPPkuinst.aspx
    • Proposed as answer by motherboardlove Sunday, October 26, 2008 12:45 AM
    • Unproposed as answer by RickImAPC Monday, October 27, 2008 2:47 PM
    • Marked as answer by RickImAPC Monday, October 27, 2008 2:47 PM
    Saturday, October 25, 2008 7:34 PM
  • Hi, thanks for the help. Problem is fixed now.
    • Marked as answer by werwulf Sunday, October 26, 2008 1:23 AM
    • Unmarked as answer by RickImAPC Monday, October 27, 2008 2:47 PM
    Saturday, October 25, 2008 11:41 PM