WGA Failure RRS feed

  • Question

  • I tried items 1 through 7 to try and fix... Problem is shortly after updating system with SP3 I received a malware attack which was not stopped by Windows Defender. It did everything to even remove me as Administrator and setup hidden Admin account. I was able clear most of it off and repair the damage but there are still remnants lingering. I still see on the system control panel where Product ID is display the work VIRUS ALERT! I reported the two offending websites to an antispyware mfr and shortly after there came down two updates for one for each site. I have run numerous times but it still has not fixed the problem.. My question is there a way to recover the Product ID and then through the registry replace the words VIRUS ALERT! with it to see if it would fix the problem and make the WGA alert go away.

    Friday, June 6, 2008 11:50 AM


All replies

  • Friday, June 6, 2008 6:54 PM
  • I encourage you to follow Carey's suggestion.


      I'm not talking to you as a Microsoft employee, right now, but as a fellow computer user and my personal opinion is that if my operating system was compromised as badly as your's sounds to been. I wouldn't feel comforable in just attempting to repair the damage caused by the malware. Because I would never know, for sure, that I fully resolved the issue.


      If it was me, I would back up all my importent files, off the computer, and re-install the OS. I know that is a pain in the back-side. But for my own ease of mind, reinstalling would be the only way I could be sure the OS was working as it should.


      I am not telling you what you should do, only what I would do. (but then again, I'm paranoid when it comes to Viruses and Malware)


    Thanks you,




    Friday, June 6, 2008 11:50 PM
  • LBS1960,

    Could you please give us some additional information concerning the virus you received? The name of the virus? The name of the scanner used to detect/resolve the virus? Along with any other information you are able to provide.

    Additionally, could you please run http://safety.live.com/ Full System Scan for virus' and spyware.


    Rick, MS
    Tuesday, August 26, 2008 9:48 PM