locked
WGA problem after virus recovery RRS feed

  • Question

  • Diagnostic Report (1.7.0095.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Not Activated
    Validation Code: 1
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3HXKM-GYCRM-CV9V9
    Windows Product Key Hash: Gm7ZsaHIpAJcinYgy3Ci5D3VdN4=
    Windows Product ID: 76437-020-9719117-22043
    Windows Product ID Type: 0
    Windows License Type: Unknown
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {241653A3-4A19-47FF-8C2D-0EC698594A31}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-171-1_025D1FF3-85-80004005
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 5
    File Exists: Yes
    Version: 1.7.18.7
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft

    I had to manually remove a new variant of the rougue "Vista 2008 Antivirus" from this machine (it's not mine, but you know... i'm the techie family friend....).... only this time the infection wasn't limited to the usual annoyances, it messed up with group policies and (apparently) with WGA.


    I did manage to reapply all (or most...? you tell me...) of the policies, but WGA still isn't working right.

     

    This is a genuine XPP upgrade licence, the key supplied is the one I see on the windows package. I tried to install SP3, just in case it could help, but I still get WGA icon in the taskbar and whenever I try to autenthicate the licence, I get an error saying it was impossible to complete the validation procedure.

    I tried to follow the procedures in KB822798 but they either had no effetcs or couldn't be completed (couldn't rename CATROOT2). SP3 did install correctly, though.

     

    Now.... what am I to do? It's the very first time I have to deal with something like this... tried searchin' around, but with no avail. Could you please help me?

     

    Thank you in advance!


    Best regards,

    Andrea

     

     

    Friday, June 27, 2008 4:55 PM

Answers

  • Zio069,

     

    You can try to run the Diagnostic website here to clear or reset the IE settings  and attempt to revalidate Windows again to see if that works.

    http://www.microsoft.com/genuine

     

    If you're still running into issues, you many need to do as Carey suggested and reinstall the previous version of Windows you have and attempt to run the upgrade again.

     

    If you have any questions or would like anything to be clarified, please don't hesitate to repost

     

    Lori MS

     

    Friday, June 27, 2008 10:05 PM
  • Zio,

     

    Thank you for visiting the Microsoft Genuine Advantage Forum.  The purpose of this forum is the support of Windows Genuine Advantage (WGA) program. Unfortuantely your questions are off topic but I would like to provide some information which may help. Please call our PC Safety line at 1-866-PCSAFETY or (1-866-727-2338).  This phone number is for virus and other security-related support free of charge. It is available 24 hours a day for the U.S. and Canada. Detailed information including selecting various regions for support can be located at: http://www.microsoft.com/protect/support/default.mspx . 

    Once any computer appears massively infected with malware and viruses experts have highly recommended to perform a complete re-installation. Please read “Cleaning a Compromised System” @:  http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx

    Unfortunately the best way for eradicating malware and virus infections is to re-image your computer.  This takes time but ultimately re-imaging the system may provide you with a better peace of mind.  Should you take this route and need assistance please reference the following self-help articles:   “How to install or upgrade to Windows XP” located @ http://support.microsoft.com/kb/316941/en-us and http://www.microsoft.com/windowsxp/using/setup/winxp/install.mspx

    Now you will need HELP for fighting spyware and keeping a newly re-formatted system free from malware and viruses.  Please always ensure critical updates are updated by visiting Windows update @ http://www.update.microsoft.com/microsoftupdate/v6/vistadefault.aspx?ln=en-us  . Next you may download Windows Defender for free. Please visit http://www.microsoft.com/windows/products/winfamily/defender/default.mspx and learn more as how Windows Defender will help thwart malware infestations.  Next visit the Microsoft Security Center here:  http://www.microsoft.com/security/default.mspx .  There are many links here providing customers comprehensible assistance for arming them against malicious activities which lurk abound the internet.   

    Windows Live OneCare is a great tool for providing the following services: Antivirus & Antispyware, Online ID Protection, Firewall, Multi-PC Management, Printer Sharing and Backup and Restore features.   Please visit http://onecare.live.com/standard/en-us/prodinfo/features.htm for more details. This suite will help detect and eradicate both malware and viruses from your system while silently running behind the scenes. OneCare may be purchased from Microsoft Marketplace @ http://www.windowsmarketplace.com/showcase.aspx?ctid=5&WT.mc_id=point_it_store_microsoft_a_G . This is a small price to pay for safeguarding your systems.

    Next I encourage regular visits to The Microsoft Security Response Center (MSRC) blog @ http://blogs.technet.com/msrc/default.aspx .  Microsoft provides a real-time way for communicating with customers as well as helping customers understand Microsoft's security response efforts. 

    Next Windows Activation falls outside the scope of the WGA Forum as well. Please review the sites below for questions/guidance pertaining to Activation. 

    Microsoft Product Activation

     

    http://www.microsoft.com/piracy/mpa.aspx

    http://www.microsoft.com/piracy/activation.mspx

     

    http://support.microsoft.com/kb/307890

    http://support.microsoft.com/kb/326851

     

    Also I suggest posting your question to the Discussions in Windows XP General Forum newsgroups here:

    http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?dg=microsoft.public.windowsxp.general&lang=en&cr=US

    Next use the search box for activation or post the question here. You will receive feedback from a Microsoft MVP, forum moderator and/or volunteers. 

    Hopefully I have been able to guide you in the right direction.

     

    Stephen Holm, MS

    WGA Forum Manager

    Wednesday, July 2, 2008 12:36 AM
  • Zio,

     

    Did you try posting your question to the Discussions in Windows XP General Forum newsgroups here:

    http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?dg=microsoft.public.windowsxp.general&lang=en&cr=US

     

    I am sorry we could not provide you assistance but unfortunately this forum is gear for Windows Genuine Advantage (WGA) issues. Again I would contact the customer service again as well as posting in the above forum where they are more geared for the question you need assistance for.

     

    Thank you Zio,

     

    Stephen Holm, MS

    WGA Forum Manager

    Wednesday, July 2, 2008 7:04 AM
  • Diagnostic Report (1.7.0095.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Not Activated
    Validation Code: 1
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3HXKM-GYCRM-CV9V9
    Windows Product Key Hash: Gm7ZsaHIpAJcinYgy3Ci5D3VdN4=
    Windows Product ID: 76437-020-9719117-22043
    Windows Product ID Type: 0
    Windows License Type: Unknown
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {241653A3-4A19-47FF-8C2D-0EC698594A31}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-171-1_025D1FF3-85-80004005
    Resolution Status: N/A

     

    IHMO (see the quote above from my very 1st post) this is a WGA diagnostic... I repeat that windows doesn't behave as if it is unregistered: the Icon that keeps popping up is the WGA icon, not the windows activation popup. And the popup doesn't say that copy is unactivated, it says that WGA cannot validate that installation.


    Now, you can say this is not a WGA issue.... but if I could successfully kill the WGA task, everything would be fine! Unfortunately, when I terminate it from task manager it keeps on respawning..... !

     

    Nevertheless I'll call the customer service and hope they can help me....

     

    Thursday, July 3, 2008 6:18 AM

All replies

  • Once a PC is infected with a computer virus or worm, the
    computer becomes compromised and nothing less than a reinstallation
    of the operating system is going to work properly.  Yes, you
    can scan and eliminate the initial virus, but you generally
    cannot undo the damage caused by the virus to the system
    files.  You'll need to reformat your hard drive and then
    reinstall your Windows operating system.

     

    Cleaning a Compromised System
    http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx



    After restoring your system, consider installing a good
    antivirus program, such as Windows OneCare.  You can
    try it absolutely FREE for 90 days.
    http://onecare.live.com/standard/en-us/default.htm

    Friday, June 27, 2008 5:35 PM
    Moderator
  • Zio069,

     

    You can try to run the Diagnostic website here to clear or reset the IE settings  and attempt to revalidate Windows again to see if that works.

    http://www.microsoft.com/genuine

     

    If you're still running into issues, you many need to do as Carey suggested and reinstall the previous version of Windows you have and attempt to run the upgrade again.

     

    If you have any questions or would like anything to be clarified, please don't hesitate to repost

     

    Lori MS

     

    Friday, June 27, 2008 10:05 PM
  • Well, actually the computer DOES have a good antivirus program (or so it is generally believed to be...) as I recently installed Norton 360, which was quite handy for its backup abilities (tons of photos, lots of school documents....).

     

    Unfortunately this was a new breed or else for some reason Norton failed to detect it at infection time (when I managed to restart the machine in a "decent" fashion it did quarantine some 6 files).

     

    Although I do agree that a clean install will do the job (and by the way, no need to re-install win 98..... I just have to supply the original CD at some point during XP installl), that would involve re-installing everything else. Now, installing XP is quite quick and handy (specially if I will slipstream SP3), re-installing everything else.... well, it takes time!

     

    Since it appears that it's just the activation status that is messed up (WGA tool reports that XP is NOT activated, but somehow I don't get the "usual" activation prompt from windows), don't you think I may try an in-place upgrade??

     

    That should trigger a new activation and possibily set the WGA status right...... or not?

     

    Or again, if I remember correctly, there's some way to manually "trigger" activation......... ok, I will probably have to call MS activation service because that would probably be the 3rd activation (1st activation at upgrade time, 2nd when I changed the motherboard and CPU a few months ago...), but maybe it is worth a try??

     

    I am really looking forward to hearing what you think about this....

     

    Thank you a lot for your help.

     

    P.S. I did try the tools at www.microsoft.com/Genuine to see if there was something wrong with IE.... unfortunately it seems that everything is ok (all green check marks).

     

    P.P.S. IMHO formatting is overrated..... usually it's enough to reinstall choosing to replace current windows directory. But I do admit that at times that won't do...

    Monday, June 30, 2008 10:49 AM
  • Zio,

     

    Thank you for visiting the Microsoft Genuine Advantage Forum.  The purpose of this forum is the support of Windows Genuine Advantage (WGA) program. Unfortuantely your questions are off topic but I would like to provide some information which may help. Please call our PC Safety line at 1-866-PCSAFETY or (1-866-727-2338).  This phone number is for virus and other security-related support free of charge. It is available 24 hours a day for the U.S. and Canada. Detailed information including selecting various regions for support can be located at: http://www.microsoft.com/protect/support/default.mspx . 

    Once any computer appears massively infected with malware and viruses experts have highly recommended to perform a complete re-installation. Please read “Cleaning a Compromised System” @:  http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx

    Unfortunately the best way for eradicating malware and virus infections is to re-image your computer.  This takes time but ultimately re-imaging the system may provide you with a better peace of mind.  Should you take this route and need assistance please reference the following self-help articles:   “How to install or upgrade to Windows XP” located @ http://support.microsoft.com/kb/316941/en-us and http://www.microsoft.com/windowsxp/using/setup/winxp/install.mspx

    Now you will need HELP for fighting spyware and keeping a newly re-formatted system free from malware and viruses.  Please always ensure critical updates are updated by visiting Windows update @ http://www.update.microsoft.com/microsoftupdate/v6/vistadefault.aspx?ln=en-us  . Next you may download Windows Defender for free. Please visit http://www.microsoft.com/windows/products/winfamily/defender/default.mspx and learn more as how Windows Defender will help thwart malware infestations.  Next visit the Microsoft Security Center here:  http://www.microsoft.com/security/default.mspx .  There are many links here providing customers comprehensible assistance for arming them against malicious activities which lurk abound the internet.   

    Windows Live OneCare is a great tool for providing the following services: Antivirus & Antispyware, Online ID Protection, Firewall, Multi-PC Management, Printer Sharing and Backup and Restore features.   Please visit http://onecare.live.com/standard/en-us/prodinfo/features.htm for more details. This suite will help detect and eradicate both malware and viruses from your system while silently running behind the scenes. OneCare may be purchased from Microsoft Marketplace @ http://www.windowsmarketplace.com/showcase.aspx?ctid=5&WT.mc_id=point_it_store_microsoft_a_G . This is a small price to pay for safeguarding your systems.

    Next I encourage regular visits to The Microsoft Security Response Center (MSRC) blog @ http://blogs.technet.com/msrc/default.aspx .  Microsoft provides a real-time way for communicating with customers as well as helping customers understand Microsoft's security response efforts. 

    Next Windows Activation falls outside the scope of the WGA Forum as well. Please review the sites below for questions/guidance pertaining to Activation. 

    Microsoft Product Activation

     

    http://www.microsoft.com/piracy/mpa.aspx

    http://www.microsoft.com/piracy/activation.mspx

     

    http://support.microsoft.com/kb/307890

    http://support.microsoft.com/kb/326851

     

    Also I suggest posting your question to the Discussions in Windows XP General Forum newsgroups here:

    http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?dg=microsoft.public.windowsxp.general&lang=en&cr=US

    Next use the search box for activation or post the question here. You will receive feedback from a Microsoft MVP, forum moderator and/or volunteers. 

    Hopefully I have been able to guide you in the right direction.

     

    Stephen Holm, MS

    WGA Forum Manager

    Wednesday, July 2, 2008 12:36 AM
  •  Stephen Holm wrote:

    Zio,

     

    Thank you for visiting the Microsoft Genuine Advantage Forum.  The purpose of this forum is the support of Windows Genuine Advantage (WGA) program. Unfortuantely your questions are off topic....

    Well, I may as well be off topic.... but I've got a WGA prompt in the taskbar of that machine! I may have agreed with you had I had an activation prompt....

    Unfortunately it's only the WGA TOOL (whose report I posted....) that "thinks" that windows copy is not activated: windows is behaving just like always.... execpt that blinking WGA icon in the taskbar! I'm getting NO PROMPT to activate that copy!

     

    Hopefully I have been able to guide you in the right direction.

    Unfortunately, not at all.... I (hope I) did a thorough research before asking for help, but found nothing like what I'm experiencing.... which is why I tried this forum.

    Guess I'll have to call my local customer service and cross my fingers....

    Wednesday, July 2, 2008 6:14 AM
  • Zio,

     

    Did you try posting your question to the Discussions in Windows XP General Forum newsgroups here:

    http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?dg=microsoft.public.windowsxp.general&lang=en&cr=US

     

    I am sorry we could not provide you assistance but unfortunately this forum is gear for Windows Genuine Advantage (WGA) issues. Again I would contact the customer service again as well as posting in the above forum where they are more geared for the question you need assistance for.

     

    Thank you Zio,

     

    Stephen Holm, MS

    WGA Forum Manager

    Wednesday, July 2, 2008 7:04 AM
  • Diagnostic Report (1.7.0095.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Not Activated
    Validation Code: 1
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-3HXKM-GYCRM-CV9V9
    Windows Product Key Hash: Gm7ZsaHIpAJcinYgy3Ci5D3VdN4=
    Windows Product ID: 76437-020-9719117-22043
    Windows Product ID Type: 0
    Windows License Type: Unknown
    Windows OS version: 5.1.2600.2.00010100.3.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {241653A3-4A19-47FF-8C2D-0EC698594A31}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-171-1_025D1FF3-85-80004005
    Resolution Status: N/A

     

    IHMO (see the quote above from my very 1st post) this is a WGA diagnostic... I repeat that windows doesn't behave as if it is unregistered: the Icon that keeps popping up is the WGA icon, not the windows activation popup. And the popup doesn't say that copy is unactivated, it says that WGA cannot validate that installation.


    Now, you can say this is not a WGA issue.... but if I could successfully kill the WGA task, everything would be fine! Unfortunately, when I terminate it from task manager it keeps on respawning..... !

     

    Nevertheless I'll call the customer service and hope they can help me....

     

    Thursday, July 3, 2008 6:18 AM