After BSOD Wallpaper is black with threat title on bottom right:
Windows Vista (TM)
Build 6002
This copy of Windows is not genuine
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Genuine
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-JYCCY-BCR32-DMY6C
Windows Product Key Hash: cZCkRrCMm28ppCADhtYfjtRr2Jo=
Windows Product ID: 89587-006-6107536-71493
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.0.6002.2.00010100.2.0.001
ID: {98B91895-56E2-4F83-B72B-6C366C371B8D}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Ultimate
Architecture: 0x00000009
Build lab: 6002.vistasp2_gdr.100608-0458
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Plus 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Marogeddon\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{98B91895-56E2-4F83-B72B-6C366C371B8D}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010100.2.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-DMY6C</PKey><PID>89587-006-6107536-71493</PID><PIDType>5</PIDType><SID>S-1-5-21-1207874918-4169329626-2677709087</SID><SYSTEM><Manufacturer>Gigabyte
Technology Co., Ltd.</Manufacturer><Model>GA-MA785GM-US2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F12a</Version><SMBIOSVersion major="2" minor="4"/><Date>20100708000000.000000+000</Date></BIOS><HWID>25320500018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern
Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>7F66DC9D00C586</Val><Hash>xfk2YyWWZ8KXM1VJaPgCFA4rmg4=</Hash><Pid>89409-707-1380871-65086</Pid><PidType>14</PidType></Product></Products><Applications><App
Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App
Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.0.6002.18005
Name: Windows(TM) Vista, Ultimate edition
Description: Windows Operating System - Vista, RETAIL channel
Activation ID: 30fab9cc-8614-4339-989f-7ce61fb7a5c4
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 89587-00142-006-610753-01-1033-6000.0000-2312010
Installation ID: 018532271211010345720416376692820855086745245216691832
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
Partial Product Key: DMY6C
License Status: Licensed
Windows Activation Technologies-->
N/A
HWID Data-->
HWID Hash Current: MgAAAAAABAABAAEAAQABAAAAAgABAAEA6GH8VeCoGIhU8hAz2nGYC/L0Ks9kj6xWji4=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value
OEMTableID Value
APIC GBT
GBTUACPI
FACP GBT
GBTUACPI
HPET GBT
GBTUACPI
MCFG GBT
GBTUACPI
