locked
"windows not genuine" after trojan attack RRS feed

  • Question

  • I got a series of bad viruses yesterday, including processes called Kkk.exe, kkl.exe, kouda.exe, and including a phony registry entry that was preventing microsoft security essentials from staying open and a google redirecting virus. I have successfully removed all of them, but I now have a problem with microsoft saying it isnt genuine windows 7

    **Windows 7

    Build 7600

    This copy of windows is not genuine** in the bottom - right corner of my desktop, and additionally Microsoft security essentials is saying it will stop working in 30 days if the problem is not resolved (who programmed that retarded crap? srsly) and I can't find where to enter the product key, and furthermore my product key sticker is faded beyond recognition. I have a log file CBS.TXT that shows the technical information related to the problem. there's some sort of corrupted file that the viruses caused. I would include the file, but I have no idea how to do so. any help, including remote assistance, would be greatly appreciated, thanks!

    Wednesday, April 6, 2011 6:26 PM

Answers

  • "Ozaku23" wrote in message news:7170c3a5-8099-4b64-ac78-a2393998c754...

    oh I'm certain I found everything, I used several scanners as well as a manual search for new files and a task manager search for unfamiliar processes (found Kkk.exe, Kkl.exe, Kouda.exe through task manager, right clicked and opened file location, deleted them). I also found a trojan and a malicious registry entry that was keeping my antivirus from staying open, so really my only problem is fixing the genuine windows....thingy. I did indeed know the exact time the computer was compromised and basically destroyed every single file that was created yesterday...the registry entry was the most irritating to find :/

    I do have a file with technical information about the corrupted system data, but I'm not sure how to include it other than copy-paste and it's a very large txt document.

     

    oh and I have windows 7 home premium

     

    MGAdiag tool showed this info:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
    Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
    Windows Product ID: 00359-OEM-8992687-00057
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Error: product key not found.


    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A8



    From the looks of it your Licensing Store is corrupted.
    Recreate the Licensing Store
        1) Click Start button.
        2) Type: CMD.exe into the 'Search programs and files' field
        3) Right-Click on CMD.exe and select Run as Administrator
        4) Type: net stop sppsvc   (It may ask you if you are sure, select yes)
        Note: the Software Protection service may not be running, this is ok.
        5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
        6) Type: rename tokens.dat tokens.bar
        7) Type: cd %windir%\system32
        8) Type: net start sppsvc
        9) Type: slui.exe
        10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.
        
        Run MGADiag again, and post the report
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, April 6, 2011 9:20 PM
    Moderator
  • "Ozaku23" wrote in message news:68fe2319-549d-4ef9-b9f8-0c6754709d27...

    k, it didnt automatically activate or ask for a key, it simply said this copy of windows is not genuine

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
    Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
    Windows Product ID: 00359-OEM-8992687-00057
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003


    Try changing the Key to the one on your COA Sticker on the case.
    Open System Properties (right-click on Computer, and select Properties) and l;ook down the bottom of the page - click on the Change Product Key link, and follow the instructions.
    You will have to activate by telephone.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, April 7, 2011 6:45 AM
    Moderator

All replies

  • "Ozaku23" wrote in message news:2a6e0bce-01f9-46a5-b61d-26557aa4678f...

    I got a series of bad viruses yesterday, including processes called Kkk.exe, kkl.exe, kouda.exe, and including a phony registry entry that was preventing microsoft security essentials from staying open and a google redirecting virus. I have successfully removed all of them, but I now have a problem with microsoft saying it isnt genuine windows 7

    **Windows 7

    Build 7600

    This copy of windows is not genuine** in the bottom - right corner of my desktop, and additionally Microsoft security essentials is saying it will stop working in 30 days if the problem is not resolved (who programmed that retarded crap? srsly) and I can't find where to enter the product key, and furthermore my product key sticker is faded beyond recognition. I have a log file CBS.TXT that shows the technical information related to the problem. there's some sort of corrupted file that the viruses caused. I would include the file, but I have no idea how to do so. any help, including remote assistance, would be greatly appreciated, thanks!


    To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
    Once saved, run the tool.
    Click on the Continue button, which will produce the report.
    To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.

    Also please tell us what the COA sticker quotes as the Version and Edition of Windows the license is valid for.


    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, April 6, 2011 6:36 PM
    Moderator
  • When a system has been compromised by malware, it can be exceptionally difficult to ascertain the extent to which it has been compromised. You cannot rely on an anti-malware scanner to detect and remove everything that may have been installed. Security products are not perfect. They rely on updates (definitions) and so may not be able to detect new forms of malware for which an update has yet to be released. Furthermore, scanners rely on information provided to them by the operating system and some malware has the ability to modify that information in order to conceal its presence. Should your system have been compromised due to a vulnerability, you really have no way of knowing what else may have been installed via that vulnerability. You cannot trust your event logs as they may have been modified, and you cannot trust your backups/images unless you can pinpoint the exact time that the computer was compromised.

    The best way to deal with a compromised system is to wipe it and reload the operating system and applications.


    Carey Frisch
    Wednesday, April 6, 2011 6:39 PM
    Moderator
  • oh I'm certain I found everything, I used several scanners as well as a manual search for new files and a task manager search for unfamiliar processes (found Kkk.exe, Kkl.exe, Kouda.exe through task manager, right clicked and opened file location, deleted them). I also found a trojan and a malicious registry entry that was keeping my antivirus from staying open, so really my only problem is fixing the genuine windows....thingy. I did indeed know the exact time the computer was compromised and basically destroyed every single file that was created yesterday...the registry entry was the most irritating to find :/

    I do have a file with technical information about the corrupted system data, but I'm not sure how to include it other than copy-paste and it's a very large txt document.

     

    oh and I have windows 7 home premium

     

    MGAdiag tool showed this info:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
    Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
    Windows Product ID: 00359-OEM-8992687-00057
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {7C0277D7-4A41-49AF-B5CE-0FD0D16FE636}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.101026-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 102
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{7C0277D7-4A41-49AF-B5CE-0FD0D16FE636}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-W8DQG</PKey><PID>00359-OEM-8992687-00057</PID><PIDType>2</PIDType><SID>S-1-5-21-3752518303-501973713-3767209612</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite A505</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>1.10</Version><SMBIOSVersion major="2" minor="6"/><Date>20091125000000.000000+000</Date></BIOS><HWID>C4B83607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSINV</OEMID><OEMTableID>TOSINV00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Error: product key not found.

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A8
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:5:2011 20:39
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: PAAAAAIABAABAAEAAQACAAAABAABAAEA6GGKBLdm4E0EM55ijmgIn44/WieN7/xoPFQSv/R9yNWEsnZW

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            TOSINV        TOSINV00
      FACP            TOSINV        TOSINV00
      HPET            TOSINV        TOSINV00
      BOOT            TOSINV        TOSINV00
      MCFG            TOSINV        TOSINV00
      WDAT            INTEL         Calpella
      ASF!            TOSINV        TOSINV00
      SLIC            TOSINV        TOSINV00
      SSDT            INTEL         SataAhci
      ASPT            INTEL         Calpella
      SSDT            INTEL         SataAhci

    Wednesday, April 6, 2011 8:58 PM
  • "Ozaku23" wrote in message news:7170c3a5-8099-4b64-ac78-a2393998c754...

    oh I'm certain I found everything, I used several scanners as well as a manual search for new files and a task manager search for unfamiliar processes (found Kkk.exe, Kkl.exe, Kouda.exe through task manager, right clicked and opened file location, deleted them). I also found a trojan and a malicious registry entry that was keeping my antivirus from staying open, so really my only problem is fixing the genuine windows....thingy. I did indeed know the exact time the computer was compromised and basically destroyed every single file that was created yesterday...the registry entry was the most irritating to find :/

    I do have a file with technical information about the corrupted system data, but I'm not sure how to include it other than copy-paste and it's a very large txt document.

     

    oh and I have windows 7 home premium

     

    MGAdiag tool showed this info:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
    Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
    Windows Product ID: 00359-OEM-8992687-00057
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Error: product key not found.


    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A8



    From the looks of it your Licensing Store is corrupted.
    Recreate the Licensing Store
        1) Click Start button.
        2) Type: CMD.exe into the 'Search programs and files' field
        3) Right-Click on CMD.exe and select Run as Administrator
        4) Type: net stop sppsvc   (It may ask you if you are sure, select yes)
        Note: the Software Protection service may not be running, this is ok.
        5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
        6) Type: rename tokens.dat tokens.bar
        7) Type: cd %windir%\system32
        8) Type: net start sppsvc
        9) Type: slui.exe
        10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.
        
        Run MGADiag again, and post the report
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, April 6, 2011 9:20 PM
    Moderator
  • k, it didnt automatically activate or ask for a key, it simply said this copy of windows is not genuine

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
    Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
    Windows Product ID: 00359-OEM-8992687-00057
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {7C0277D7-4A41-49AF-B5CE-0FD0D16FE636}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.101026-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 102
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{7C0277D7-4A41-49AF-B5CE-0FD0D16FE636}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-W8DQG</PKey><PID>00359-OEM-8992687-00057</PID><PIDType>2</PIDType><SID>S-1-5-21-3752518303-501973713-3767209612</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite A505</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>1.10</Version><SMBIOSVersion major="2" minor="6"/><Date>20091125000000.000000+000</Date></BIOS><HWID>C4B83607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSINV</OEMID><OEMTableID>TOSINV00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800057-02-1033-7600.0000-0962011
    Installation ID: 013294473033566403914034530923076630785850371945064564
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: W8DQG
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 4
    Trusted time: 4/6/2011 8:05:41 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A8
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:5:2011 20:39
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: PAAAAAIABAABAAEAAQACAAAABAABAAEA6GGKBLdm4E0EM55ijmgIn44/WieN7/xoPFQSv/R9yNWEsnZW

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            TOSINV        TOSINV00
      FACP            TOSINV        TOSINV00
      HPET            TOSINV        TOSINV00
      BOOT            TOSINV        TOSINV00
      MCFG            TOSINV        TOSINV00
      WDAT            INTEL         Calpella
      ASF!            TOSINV        TOSINV00
      SLIC            TOSINV        TOSINV00
      SSDT            INTEL         SataAhci
      ASPT            INTEL         Calpella
      SSDT            INTEL         SataAhci



    Thursday, April 7, 2011 1:06 AM
  • "Ozaku23" wrote in message news:68fe2319-549d-4ef9-b9f8-0c6754709d27...

    k, it didnt automatically activate or ask for a key, it simply said this copy of windows is not genuine

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
    Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
    Windows Product ID: 00359-OEM-8992687-00057
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003


    Try changing the Key to the one on your COA Sticker on the case.
    Open System Properties (right-click on Computer, and select Properties) and l;ook down the bottom of the page - click on the Change Product Key link, and follow the instructions.
    You will have to activate by telephone.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, April 7, 2011 6:45 AM
    Moderator
  • "Ozaku23" wrote in message news:68fe2319-549d-4ef9-b9f8-0c6754709d27...

    k, it didnt automatically activate or ask for a key, it simply said this copy of windows is not genuine

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
    Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
    Windows Product ID: 00359-OEM-8992687-00057
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003


    Try changing the Key to the one on your COA Sticker on the case.
    Open System Properties (right-click on Computer, and select Properties) and l;ook down the bottom of the page - click on the Change Product Key link, and follow the instructions.
    You will have to activate by telephone.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    well the problem now is that my activation sticker is faded beyond recognition. is there any way to get a new code or something?
    Tuesday, April 12, 2011 9:17 PM
  • "Ozaku23" wrote in message news:f4c54790-a3ee-45b1-b3fe-6f2f95e32d65...
    "Ozaku23" wrote in message news:68fe2319-549d-4ef9-b9f8-0c6754709d27...

    k, it didnt automatically activate or ask for a key, it simply said this copy of windows is not genuine

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
    Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
    Windows Product ID: 00359-OEM-8992687-00057
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003


    Try changing the Key to the one on your COA Sticker on the case.
    Open System Properties (right-click on Computer, and select Properties) and l;ook down the bottom of the page - click on the Change Product Key link, and follow the instructions.
    You will have to activate by telephone.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    well the problem now is that my activation sticker is faded beyond recognition. is there any way to get a new code or something?

    Unfortunately not - try using a magnifying glass, and a bright light. This sometimes helps one to read the faded characters.
    The only other solution that comes to mind is a full System Recovery from the manufacturer's recovery disks - you will need to back up all data to external storage first, as it WILL wipe your system clean, and return it to ex-factory state.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, April 13, 2011 7:47 AM
    Moderator
  • well  now I have some new information: when I start up the computer, I get a message saying "you might be a victim of software counterfeiting", and it gives an error code:

    0xC004F200

     

    not sure how helpful this is, but I cant seem to get the right code off my sticker so any new suggestions would be great, thx.

    Tuesday, April 19, 2011 6:13 PM
  • oh also I saw something about "optional update delivery not working" but the update that came out today or in the last week downloaded, but I havent restarted yet so we'll see if that does anything.
    Wednesday, April 20, 2011 12:06 AM
  • "Ozaku23" wrote in message news:f6a65d8e-9a99-41c1-9a2b-d2cd73ed369b...
    oh also I saw something about "optional update delivery not working" but the update that came out today or in the last week downloaded, but I havent restarted yet so we'll see if that does anything.

    You'll get security updates regardless of the validation state of the PC - optional ones will be blocked.
     
    The Error code 0xc004f200 means that the Key in use is not a valid one.
     
    Have you changed the Key yet? what happened then?
     
     
     
    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, April 20, 2011 12:45 AM
    Moderator
  • still cant get a valid key off my sticker :/
    Wednesday, April 20, 2011 11:09 PM
  • "Ozaku23" wrote in message news:6c5baf51-79ac-46fe-ae46-19013f8af395...
    still cant get a valid key off my sticker :/

    If you mean that the Change Key wizard won't let you complete the process to get as far as activation, then you are not entering a proper Key. This is almost certainly because you are misreading the label.
    use a magnifying glass and a bright light - it's something I do automatically now, having been in that position all too many times.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, April 21, 2011 5:01 AM
    Moderator