locked
unable to complete WGA validation RRS feed

  • Question

  • My winxp pro sp3 fully updated system (VL) now fails validation after a virus attack which I now believe to be cleaned. How do I change back the settings which the virus seem to have altered ? There are no previous registry copies to restore.

    Diagnostic Report (1.7.0095.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-8YV6K-KP64X-VM9MG
    Windows Product Key Hash: KCDMn7NY+IC0RWQywu5zdzvwISk=
    Windows Product ID: VIRUS-640-0968345-23471
    Windows Product ID Type: 0
    Windows License Type: Unknown
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {F95567B2-B554-4A51-8210-AEBCD7A9518E}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-171-1_025D1FF3-80-80004005_63BB5E84-577-80004005_E2AD56EA-235-80004005_16E0B333-89-80004005_16E0B333-181-8000ffff_16E0B333-108-8000ffff_78155E4D-232-8000ffff
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 5
    File Exists: Yes
    Version: 1.7.18.7
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    OGA Version: Registered, 1.6.28.0
    Signed By: Microsoft
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-171-1_025D1FF3-80-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F95567B2-B554-4A51-8210-AEBCD7A9518E}</UGUID><Version>1.7.0095.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VM9MG</PKey><PID>VIRUS-640-0968345-23471</PID><PIDType>0</PIDType><SID>S-1-5-21-854245398-2052111302-725345543</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>D945GCR_</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>CR94510J.86A.0037.2007.0103.1611</Version><SMBIOSVersion major="2" minor="4"/><Date>20070103000000.000000+000</Date></BIOS><HWID>B5C2377F0184E05A</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Arabian Standard Time(GMT+04:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57340</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults> 



    Friday, August 22, 2008 7:33 AM

Answers

  • Sen Sir,

    Please look on the computer or with the materials you received with the computer or with your retail purchase of  Windows to see if you have a Certificate of Authenticity (CoA).  If you have one, tell us about the COA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or Media Center, or another version of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the Product Key printed on the CoA.

    Not sure what to look for?  See this page for reference:  http://www.microsoft.com/resources/howtotell/en/coa.mspx

    Some bad news:  the folowing section of the report shows that your installed Office 2003 is nongenuine.  Please uninstall this nongenuine copy of office 2003 as soon as possible.

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by RickImAPC Tuesday, September 2, 2008 3:04 PM
    Friday, August 22, 2008 3:06 PM
  • Sen Sir,

    Could you please download and run the MS Genuine Diagnostic Tool utility again at this link http://go.microsoft.com/fwlink/?linkid=52012 , then click the Windows tab, Copy to Clipboard, then paste the report into a New Post on this Forum.  

    Step 2 is telling us about the COA. Tell us:

    1. What edition of Windows XP is it for, Home, Pro, or Media Center?

    2. Does it read "OEM Software" or "OEM Product" in black lettering?

    3. Or, does it have the computer manufacturer's name in black lettering?

    4. DO NOT post the Product Key.

    5. Please also provide a short description of the issue you are experiencing.

     

    NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.


    We would like to review the data upon reading the information you posted about your fix. In support of Dan at IT Associates, your previous diagnostic report did show that you had a nongenuine copy of Office.

    Thanks for your continued support.

    Rick, MS 

    • Marked as answer by RickImAPC Tuesday, September 2, 2008 3:03 PM
    Friday, August 22, 2008 4:10 PM

All replies

  • Sen Sir,

    Please look on the computer or with the materials you received with the computer or with your retail purchase of  Windows to see if you have a Certificate of Authenticity (CoA).  If you have one, tell us about the COA.  Tell us:

    1.  What edition of Windows XP is it for, Home, Pro, or Media Center, or another version of Windows?

    2.  Does it read "OEM Software" or "OEM Product" in black lettering?

    3.  Or, does it have the computer manufacturer's name in black lettering?

    4.  DO NOT post the Product Key printed on the CoA.

    Not sure what to look for?  See this page for reference:  http://www.microsoft.com/resources/howtotell/en/coa.mspx

    Some bad news:  the folowing section of the report shows that your installed Office 2003 is nongenuine.  Please uninstall this nongenuine copy of office 2003 as soon as possible.

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2


    For great advice on all topics XP, visit http://www.annoyances.org/exec/forum/winxp
    • Marked as answer by RickImAPC Tuesday, September 2, 2008 3:04 PM
    Friday, August 22, 2008 3:06 PM
  • I managed to solve the WGA issue by changing the registry values back. Thanks
    Friday, August 22, 2008 3:48 PM
  • Sen Sir,

    Could you please download and run the MS Genuine Diagnostic Tool utility again at this link http://go.microsoft.com/fwlink/?linkid=52012 , then click the Windows tab, Copy to Clipboard, then paste the report into a New Post on this Forum.  

    Step 2 is telling us about the COA. Tell us:

    1. What edition of Windows XP is it for, Home, Pro, or Media Center?

    2. Does it read "OEM Software" or "OEM Product" in black lettering?

    3. Or, does it have the computer manufacturer's name in black lettering?

    4. DO NOT post the Product Key.

    5. Please also provide a short description of the issue you are experiencing.

     

    NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.


    We would like to review the data upon reading the information you posted about your fix. In support of Dan at IT Associates, your previous diagnostic report did show that you had a nongenuine copy of Office.

    Thanks for your continued support.

    Rick, MS 

    • Marked as answer by RickImAPC Tuesday, September 2, 2008 3:03 PM
    Friday, August 22, 2008 4:10 PM
  • Sen Sir,

    A few additional points of interest for you:

    Having a Microsoft Certificate of Authenticity for Windows XP Professional affixed to your system indicates there is a strong likelihood your system is still licensed to run XP Pro.

    Please click on this link: http://www.microsoft.com/genuine/selfhelp/pkuinstructions.aspx in order to receive detailed instructions for updating and using the Product Key (PK) Update Utility. Next you will be required to select the Windows version currently installed on your system. The PK utility was designed to update the non-genuine key previously used to activate XP and/or Vista with a known good key.

    If you have antivirus, antispyware, or firewall programs installed, please make sure these programs are set to allow the product key update utility to have full access to the internet so it may perform correctly.

    Also, if you have a moment to visit http://safety.live.com and click on the "Full Service Scan" button. Follow the directions to completely scan your system for potential malware.

    Respectfully,

    Rick, MS

    Friday, August 22, 2008 5:33 PM
  • Sen Sir,

    Could you please give us some additional information concerning the virus you received? The name of the virus? The name of the scanner used to detect/resolve the virus? Along with any other information you are able to provide.

    Additionally, could you please run http://safety.live.com/ Full System Scan for virus' and spyware.

    Respectfully,

    Rick, MS
    Tuesday, August 26, 2008 9:43 PM