locked
MGA Diagnostic Report RRS feed

  • Question

  • Hi,

    Here is an MGA Diagnostic Report i was told to Copy and post in a new thread on this forum

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4JJQP-TP64Y-RPFFV
    Windows Product Key Hash: W7I5PeTN2iJuvTTU9QmIXc6iQqY=
    Windows Product ID: 89578-OEM-7332157-00043
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {9849596C-1A2E-4BEF-8B02-CD7B6FB28107}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: T:20110606171658149-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{9849596C-1A2E-4BEF-8B02-CD7B6FB28107}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-RPFFV</PKey><PID>89578-OEM-7332157-00043</PID><PIDType>2</PIDType><SID>S-1-5-21-2154032859-1883374182-3320367249</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1720                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A08</Version><SMBIOSVersion major="2" minor="4"/><Date>20080421000000.000000+000</Date></BIOS><HWID>26333507018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>_ASUS_</OEMID><OEMTableID>Notebook</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomePremium edition
    Description: Windows Operating System - Vista, OEM_SLP channel
    Activation ID: bffdc375-bbd5-499d-8ef1-4f37b61c895f
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89578-00146-321-500043-02-2057-6002.0000-1582011
    Installation ID: 013720071435267204357123392885319306147291816874838873
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: RPFFV
    License Status: Unlicensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: PAAAAAIABAABAAEAAwABAAAAAwABAAEAJJRGd3oQFT92/0hFonBGg0oPRBfy9FrUd/aY2/gR+vWsViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          M08   
      FACP            DELL          M08   
      HPET            DELL          M08   
      BOOT            DELL          M08   
      MCFG            DELL          M08   
      SLIC            _ASUS_        Notebook
      SSDT            PmRef        CpuPm


    I have a problem... I have a genuine Windows Vista Home Premium (32bit). I did a system restore a few days ago and when restarted/reboot it came up saying i had to activate Windows as it was no longer Genuine!

    I tried my product key, which is underneath my laptop (Dell Inspiron 1720) and it said my product was invalid.

    I tried various other measures, being the automated phone service which did not work and so i tried speaking to a Microsoft tech support of which she told me to do the same thing as the automated service, so went through it with her and it failed again, same error:-

    Activation Error
    Error Code 0xC004E003

    The Software Licensing Service reported that license evaluation failed.

    I get this error no matter what activation process i try, the woman at Microsoft told me she cannot help with this problem!!!

    Very fed up, as i am getting multiple messages pop up on Windows saying if i do not activate it programmes will no longer work. I've paid a lot of money for this laptop and have never had problems like this before. I am certainly not paying for a new product key seeing as my Windows is (or was up until now) genuine.

     

    Can someone please help, i have 22 days left until some of my programmes will not work due to this stupid problem.

    Tuesday, June 14, 2011 2:29 PM

Answers

  • "RichC61" wrote in message news:87068f63-fb89-4430-a999-d3d578190d0a...

    Hi,

    Here is an MGA Diagnostic Report i was told to Copy and post in a new thread on this forum

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4JJQP-TP64Y-RPFFV
    Windows Product Key Hash: W7I5PeTN2iJuvTTU9QmIXc6iQqY=
    Windows Product ID: 89578-OEM-7332157-00043
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {9849596C-1A2E-4BEF-8B02-CD7B6FB28107}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: T:20110606171658149-

    Other data-->
    SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1720                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A08</Version><SMBIOSVersion major="2" minor="4"/><Date>20080421000000.000000+000</Date></BIOS


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
      
      SLIC            _ASUS_        Notebook
      SSDT            PmRef        CpuPm


    I have a problem... I have a genuine Windows Vista Home Premium (32bit). I did a system restore a few days ago and when restarted/reboot it came up saying i had to activate Windows as it was no longer Genuine!

    I tried my product key, which is underneath my laptop (Dell Inspiron 1720) and it said my product was invalid.

    I tried various other measures, being the automated phone service which did not work and so i tried speaking to a Microsoft tech support of which she told me to do the same thing as the automated service, so went through it with her and it failed again, same error:-

    Activation Error
    Error Code 0xC004E003

    The Software Licensing Service reported that license evaluation failed.

    I get this error no matter what activation process i try, the woman at Microsoft told me she cannot help with this problem!!!

    Very fed up, as i am getting multiple messages pop up on Windows saying if i do not activate it programmes will no longer work. I've paid a lot of money for this laptop and have never had problems like this before. I am certainly not paying for a new product key seeing as my Windows is (or was up until now) genuine.

     

    Can someone please help, i have 22 days left until some of my programmes will not work due to this stupid problem.


    Your problem is that there appears to be an Activation Exploit present on your machine - which is telling the OS that the machine is in fact an Asus Notebook.
    Have you loaned the machine to anyone lately? You might like to ask them what they've been up to.
    One of the problems with activation exploits is that there are a number of them - and unless you know which is in use, it's difficult to know how to remove them.
     
    One clue that may help is that you had a Trusted Store Tamper on 6th June, which coincides nicely with the start of your problem - was anything installed on that date (either hardware or software?), or did you have a virus warning?
     
    I hate to say it, but unless you can discover the source of the exploit, it's likely that the only cure is going to be a reformat reinstall using the Recovery software for your machine.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Wednesday, June 15, 2011 10:03 PM
    Tuesday, June 14, 2011 2:52 PM
    Moderator

All replies

  • "RichC61" wrote in message news:87068f63-fb89-4430-a999-d3d578190d0a...

    Hi,

    Here is an MGA Diagnostic Report i was told to Copy and post in a new thread on this forum

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4JJQP-TP64Y-RPFFV
    Windows Product Key Hash: W7I5PeTN2iJuvTTU9QmIXc6iQqY=
    Windows Product ID: 89578-OEM-7332157-00043
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {9849596C-1A2E-4BEF-8B02-CD7B6FB28107}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: T:20110606171658149-

    Other data-->
    SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1720                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A08</Version><SMBIOSVersion major="2" minor="4"/><Date>20080421000000.000000+000</Date></BIOS


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
      
      SLIC            _ASUS_        Notebook
      SSDT            PmRef        CpuPm


    I have a problem... I have a genuine Windows Vista Home Premium (32bit). I did a system restore a few days ago and when restarted/reboot it came up saying i had to activate Windows as it was no longer Genuine!

    I tried my product key, which is underneath my laptop (Dell Inspiron 1720) and it said my product was invalid.

    I tried various other measures, being the automated phone service which did not work and so i tried speaking to a Microsoft tech support of which she told me to do the same thing as the automated service, so went through it with her and it failed again, same error:-

    Activation Error
    Error Code 0xC004E003

    The Software Licensing Service reported that license evaluation failed.

    I get this error no matter what activation process i try, the woman at Microsoft told me she cannot help with this problem!!!

    Very fed up, as i am getting multiple messages pop up on Windows saying if i do not activate it programmes will no longer work. I've paid a lot of money for this laptop and have never had problems like this before. I am certainly not paying for a new product key seeing as my Windows is (or was up until now) genuine.

     

    Can someone please help, i have 22 days left until some of my programmes will not work due to this stupid problem.


    Your problem is that there appears to be an Activation Exploit present on your machine - which is telling the OS that the machine is in fact an Asus Notebook.
    Have you loaned the machine to anyone lately? You might like to ask them what they've been up to.
    One of the problems with activation exploits is that there are a number of them - and unless you know which is in use, it's difficult to know how to remove them.
     
    One clue that may help is that you had a Trusted Store Tamper on 6th June, which coincides nicely with the start of your problem - was anything installed on that date (either hardware or software?), or did you have a virus warning?
     
    I hate to say it, but unless you can discover the source of the exploit, it's likely that the only cure is going to be a reformat reinstall using the Recovery software for your machine.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Wednesday, June 15, 2011 10:03 PM
    Tuesday, June 14, 2011 2:52 PM
    Moderator
  • Hi,

    Thanks for the quick reply.

    I was out when it happened but my other half, whilst browsing on wedding sites said something happened and then the Blue Screen of Death came up.

    The next morning when i turned  the laptop on myself, the blue screen came up and wouldn't let me log into windows. I managed to do a system restore and since that restore, the activation problem has come about.

    So does this mean i am stuffed ? :-/

    Tuesday, June 14, 2011 3:26 PM
  • "RichC61" wrote in message news:c1f368a0-d6bd-4022-b93e-4f033c65791f...

    Hi,

    Thanks for the quick reply.

    I was out when it happened but my other half, whilst browsing on wedding sites said something happened and then the Blue Screen of Death came up.

    The next morning when i turned  the laptop on myself, the blue screen came up and wouldn't let me log into windows. I managed to do a system restore and since that restore, the activation problem has come about.

    So does this mean i am stuffed ? :-/


    Possibly :(
    Since this appears to be a case of a malware infection, the following are worth a try.....
    download, install, update and run Malwarebytes Anti-Malware (www.malwarebytes.org - free version- do NOT enable the real-time protection module) and see what it finds. Delete everything it does find.
    Update your Anti-Virus program (which one is it?) and run a full system scan.
    report back on results (no details required - just the number of infections found will suffice)
    and post a new MGADiag report.
    Darin may have some thoughts on the subject he'd like to share when he gets in.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, June 14, 2011 3:51 PM
    Moderator
  • Hi,

    I will try Malwarebytes again shortly, i did have Avast Anti-Virus but just (about 2hrs ago) uninstalled it, as somewhere else online i saw a thread saying Avas could be the problem.... but it turned out it wasn't.

    Just also tried an scf scan, it got to 88% complete and said it had found some corrupted windows files and could not repair some of them so ceased at 88%.

    I'm fed up here, i had only just installed a new hard drive at Christmas time and got all my programmes up and running again now it looks like i'm going to have to re-install Windows yet again.

    I am also using Windows Security Essentials and this is one of the programmes which keeps reminding me it wont work in 23 days.

    I was wondering, how unstable is windows when the 23days (30 originally) is up? Will this mean i cannot use windows or would i be able to run just fine without activating?

    I know that someone else i know has a problem (similar) and she can no longer access her memory sticks or anything.

    If its going to cause major problems like not letting me use some programmes then it will be a big problem, i can live without Security essentials but unsure what else it nulls out for use.

    Off to try Malwarebytes, i did an Avast scan before i uninstalled it and it came up with nothing, as it did when i had the Blue screen a week ago.


    Tuesday, June 14, 2011 4:10 PM
  • "RichC61" wrote in message news:6c5394c9-17e9-4abe-85b9-38876eed15db...

    Hi,

    I will try Malwarebytes again shortly, i did have Avast Anti-Virus but just (about 2hrs ago) uninstalled it, as somewhere else online i saw a thread saying Avas could be the problem.... but it turned out it wasn't.

    Just also tried an scf scan, it got to 88% complete and said it had found some corrupted windows files and could not repair some of them so ceased at 88%.

    I'm fed up here, i had only just installed a new hard drive at Christmas time and got all my programmes up and running again now it looks like i'm going to have to re-install Windows yet again.

    I am also using Windows Security Essentials and this is one of the programmes which keeps reminding me it wont work in 23 days.

    I was wondering, how unstable is windows when the 23days (30 originally) is up? Will this mean i cannot use windows or would i be able to run just fine without activating?

    I know that someone else i know has a problem (similar) and she can no longer access her memory sticks or anything.

    If its going to cause major problems like not letting me use some programmes then it will be a big problem, i can live without Security essentials but unsure what else it nulls out for use.

    Off to try Malwarebytes, i did an Avast scan before i uninstalled it and it came up with nothing, as it did when i had the Blue screen a week ago.



    I know how much of a pain it is - believe me!
    MSE will stop working - Windows Media Center will stop working (I think WMP will be OK - I'm not sure) - and IE9 may decide that it's not going to work (again, not sure). Other than that, all you may have trouble with is the desktop background
     
    Avast 5.x wasn't a problem in Vista - we haven't yet isolated the cause of the problem with v6, and Avast have so far denied that it exists.
     
    the SFC scan should complete, whether it found errors or not - so you need to do it again anyhow.
    What other anti-malware apps do you have installed?
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, June 14, 2011 5:02 PM
    Moderator
  • I am still scanning with AntiMalwarebytes, 2hrs 30mins in to it so far with a full system scan.

    I already have the windows background issue, it doesnt want to change anything except keep it black with text in the bottom corner telling my i have not got a genuine windows vista (yeah right!).

    I use Firefox 4.0 for browsing so the IE9 might not be a problem, will soon see.

    I did have AVG installed but it was causing problems a long time ago so replaced it with AVAST, although i did not pay for Avast, i just kept it as is after the trial period.
    I will re-scan with SFC again after AMB has finished the full system scan.
    Thanks so far for the help.

    Am at a loss on how suddenly my laptop suddenly thinks it is an Asus Notebook.

     

    Edit, as i was typing, MSE came up (popped up) with the following:-

    TrojanDownloader:Java/Openstream/AY - Suspended

    Exploit:Java/CVE-2010-0840.CI - Suspended

    TrojanDownloader.Java/OpenConnection.MV - Suspended

    I have press "Remove" for these....

     

     


    Tuesday, June 14, 2011 6:41 PM
  • "RichC61" wrote in message news:9b1e94a2-38c1-4ea0-8060-536ff6027c37...

    I am still scanning with AntiMalwarebytes, 2hrs 30mins in to it so far with a full system scan.

    I already have the windows background issue, it doesnt want to change anything except keep it black with text in the bottom corner telling my i have not got a genuine windows vista (yeah right!).

    I use Firefox 4.0 for browsing so the IE9 might not be a problem, will soon see.

    I did have AVG installed but it was causing problems a long time ago so replaced it with AVAST, although i did not pay for Avast, i just kept it as is after the trial period.
    I will re-scan with SFC again after AMB has finished the full system scan.
    Thanks so far for the help.

    Am at a loss on how suddenly my laptop suddenly thinks it is an Asus Notebook.

     

    Edit, as i was typing, MSE came up (popped up) with the following:-

    TrojanDownloader:Java/Openstream/AY - Suspended

    Exploit:Java/CVE-2010-0840.CI - Suspended

    TrojanDownloader.Java/OpenConnection.MV - Suspended

    I have press "Remove" for these....

     

     



    Hmmm Java problems - you need to check that all old versions of Java are uninstalled, and that you are running the latest version (6.0.26)
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, June 14, 2011 7:38 PM
    Moderator
  • Okay,

    Old Java was uninstalled and replaced with the latest Java on the Java website.

    Malwarebytes did not find anything.....

    Tuesday, June 14, 2011 8:28 PM
  • "RichC61" wrote in message news:89fbaada-8097-412e-baa5-7da0eba6b986...

    Okay,

    Old Java was uninstalled and replaced with the latest Java on the Java website.

    Malwarebytes did not find anything.....


    That does surprise me, if MSE found three Java exploits, I would have expected MBAM to find them also - assuming you had it on full scan mode, and MSE hadn't got rid of them before MBAM got to them.
     
    Have you rebooted, and tried another MGADiag report?
     
    If not, please do so - post the results.
     
    If you have, and the MGADiag still reports the same problems, then all I can suggest is going to either Malware support of WGA Support.
     
    I think you can justifiably go to Malware support in this case (it's free) - I'm pretty convinced that the problem is the result of a malware infestation of some kind. http://supportservices.microsoft.com/support/services/virus_malware_removal
     
    If they won't take you on - point them at this thread - then your only option short of a reinstall is WGA support. If you follow the directions for Activation/Validation problems all the time you *may* get free support.
     
     
    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, June 14, 2011 8:47 PM
    Moderator
  • The MSE got rid of them before MBAM got there by the looks of it.

    New Report

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4JJQP-TP64Y-RPFFV
    Windows Product Key Hash: W7I5PeTN2iJuvTTU9QmIXc6iQqY=
    Windows Product ID: 89578-OEM-7332157-00043
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {9849596C-1A2E-4BEF-8B02-CD7B6FB28107}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: T:20110606171658149-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{9849596C-1A2E-4BEF-8B02-CD7B6FB28107}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-RPFFV</PKey><PID>89578-OEM-7332157-00043</PID><PIDType>2</PIDType><SID>S-1-5-21-2154032859-1883374182-3320367249</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1720                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A09</Version><SMBIOSVersion major="2" minor="4"/><Date>20080711000000.000000+000</Date></BIOS><HWID>26333507018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>_ASUS_</OEMID><OEMTableID>Notebook</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomePremium edition
    Description: Windows Operating System - Vista, OEM_SLP channel
    Activation ID: bffdc375-bbd5-499d-8ef1-4f37b61c895f
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89578-00146-321-500043-02-2057-6002.0000-1652011
    Installation ID: 013720071435267204357123392885319306147291816874838873
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: RPFFV
    License Status: Unlicensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: PAAAAAIABAABAAEAAwABAAAAAwABAAEAJJRGd3oQFT92/0hFonBGg0oPRBfy9FrUd/aY2/gR+vWsViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          M08   
      FACP            DELL          M08   
      HPET            DELL          M08   
      BOOT            DELL          M08   
      MCFG            DELL          M08   
      SLIC            _ASUS_        Notebook
      SSDT            PmRef        CpuPm


    Still showing the ASUS there, how baffling.

    Tuesday, June 14, 2011 9:04 PM
  • You will need to backup your personal files, then perform a "clean install" using the correct Dell Windows Vista Reinstallation disc.  To obtain one, please see: Request Dell Backup Discs
    Carey Frisch
    Tuesday, June 14, 2011 9:35 PM
    Moderator
  • "Carey Frisch" wrote in message news:87bfa884-9a90-4233-8e2b-a13780f2bb42...
    You will need to backup your personal files, then perform a "clean install" using the correct Dell Windows Vista Reinstallation disc.  To obtain one, please see: Request Dell Backup Discs
    Carey Frisch
    Read the rest of the thread, Carey!
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, June 14, 2011 9:53 PM
    Moderator
  • "RichC61" wrote in message news:6c4eed96-c30c-442d-ae99-0e2df7144d19...

    The MSE got rid of them before MBAM got there by the looks of it.

    New Report

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-4JJQP-TP64Y-RPFFV
    Windows Product Key Hash: W7I5PeTN2iJuvTTU9QmIXc6iQqY=
    Windows Product ID: 89578-OEM-7332157-00043
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003


    Still showing the ASUS there, how baffling.


    It is, rather!
    I think the Malware support is worth a try.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, June 14, 2011 9:56 PM
    Moderator
  • Hi Noel,

    Back from Malware Support, unfortunately he found no problems at all regarding malware, viruses etc, it seems MSE got rid of the offenders however he too doesn't know how to resolve the activation issue.

    When i try to activate online, instead of the few minutes that it should take, it justs keeps going, i had it going for over 30mins earlier with nothing happening. When i first had the problem and was going through the various activation methods with Phone support, the online activation only took a few minutes but everytime, it failed with the same error that i stated first off,

    "Activation Error
    Error Code 0xC004E003

    The Software Licensing Service reported that license evaluation failed"

    I thought maybe not reformatting might have been an option. I have so many gigabytes of photos and programmes on here.... I'd need to buy another external HDD to store them on first. I can't afford that. As i'd have to have loads of CD's otherwise.

    I wish people would stop messing with other peoples computers. I'd strangle a hacker if i ever knew one.

    It is unfair that Microsoft have implemented this feature when those with genuine windows get caught up with this mess with no way of getting out of it but reformatting.
    Tuesday, June 14, 2011 10:08 PM
  • "RichC61" wrote in message news:6f9a3d95-3232-4146-a287-42dedc34ac11...

    Hi Noel,

    Back from Malware Support, unfortunately he found no problems at all regarding malware, viruses etc, it seems MSE got rid of the offenders however he too doesn't know how to resolve the activation issue.

    When i try to activate online, instead of the few minutes that it should take, it justs keeps going, i had it going for over 30mins earlier with nothing happening. When i first had the problem and was going through the various activation methods with Phone support, the online activation only took a few minutes but everytime, it failed with the same error that i stated first off,

    "Activation Error
    Error Code 0xC004E003

    The Software Licensing Service reported that license evaluation failed"

    I thought maybe not reformatting might have been an option. I have so many gigabytes of photos and programmes on here.... I'd need to buy another external HDD to store them on first. I can't afford that. As i'd have to have loads of CD's otherwise.

    I wish people would stop messing with other peoples computers. I'd strangle a hacker if i ever knew one.

    It is unfair that Microsoft have implemented this feature when those with genuine windows get caught up with this mess with no way of getting out of it but reformatting.

    That was quick!
     
    Oh well, try WGA Support instead - if they do charge you it's about the same price as a reasonable sized disk ($56, I think)

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, June 14, 2011 11:01 PM
    Moderator
  • For those who need help with offering appropriate, sound advice when dealing with an infected system, please review: Cleaning a Compromised System
    Carey Frisch
    Tuesday, June 14, 2011 11:18 PM
    Moderator
  • "Carey Frisch" wrote in message news:100836f1-9b09-4e2e-908f-af7ea515bc81...
    For those who need help with offering appropriate, sound advice when dealing with an infected system, please review: Cleaning a Compromised System
    Carey Frisch

    So - you're saying that MS Malware Specialists are appropriate, or effective, and don't give sound advice?
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, June 14, 2011 11:20 PM
    Moderator
  • Not at all.  This is applicable to those who are not a certified MS Malware Specialist.
    Carey Frisch
    Tuesday, June 14, 2011 11:41 PM
    Moderator
  • "Carey Frisch" wrote in message news:dbf8f53b-a335-4117-a2cf-4346b94d59bf...
    Not at all.  This is applicable to those who are not a certified MS Malware Specialist.
    Carey Frisch

    In that case, why write it at all? - the only references in this thread have been to MS support (WGA and Malware), and recognised anti-malware apps.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, June 15, 2011 12:07 AM
    Moderator

  • "Activation Error
    Error Code 0xC004E003

    The Software Licensing Service reported that license evaluation failed"

    I'm not well versed with dealing with Malware so I can't add to the discussion about that, but the above error suggests to me that Vista's Licensing Store file (or the data it contains) maybe corrupt.

    So before you do anything drastic, please try the below steps. The steps will recreate the Licensing Store file and repopulate it's data.

    1) Open an Internet Browser window.
    2) Type: %windir%\system32 into the browser address bar.
    3) Find the file CMD.exe
    4) Right-Click on CMD.exe and select 'Run as Administrator'
    5) Type: net stop slsvc  (it may ask you if you are sure, select yes)
    6) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing
    7) Type: rename tokens.dat tokens.bar
    8) Type: cd %windir%\system32
    9) Type: net start slsvc
    10) Type: cscript slmgr.vbs -rilc (It may take a long time for this to complete, please be patient)
    11) Restart your computer twice.
    12) You may be required to enter the Product Key and/or re-Activate. Be sure to use the Product Key listed on the sticker located on the side, bottom or (for some laptops) in the battery compartment of the PC. When Activating, please use the 'By Phone' method instead of activating over the Internet.

     

    Hope that helps,


    Darin MS
    • Proposed as answer by Darin Smith MS Wednesday, June 15, 2011 5:25 PM
    • Unproposed as answer by Darin Smith MS Wednesday, June 15, 2011 10:06 PM
    Wednesday, June 15, 2011 5:25 PM
  • "Darin Smith MS" wrote in message news:21a2f365-d3e9-40b8-a47a-7d7adcd4d4d3...

    "Activation Error
    Error Code 0xC004E003

    The Software Licensing Service reported that license evaluation failed"

    I'm not well versed with dealing with Malware so I can't add to the discussion about that, but the above error suggests to me that Vista's Licensing Store file (or the data it contains) maybe corrupt.

    So before you do anything drastic, please try the below steps. The steps will recreate the Licensing Store file and repopulate it's data.

     


    Darin MS

    Unfortunately, Darin, the OP's COA sticker is illegible :(
    Will the Licensing store fix work with the OEM_SLP Key? I hope to have the opportunity to test it on my own machine soon as I try to kill it prior to a Clean install of Win7 <vbeg>
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, June 15, 2011 5:29 PM
    Moderator
  • "Darin Smith MS" wrote in message news:21a2f365-d3e9-40b8-a47a-7d7adcd4d4d3...

    "Activation Error
    Error Code 0xC004E003

    The Software Licensing Service reported that license evaluation failed"

    I'm not well versed with dealing with Malware so I can't add to the discussion about that, but the above error suggests to me that Vista's Licensing Store file (or the data it contains) maybe corrupt.

    So before you do anything drastic, please try the below steps. The steps will recreate the Licensing Store file and repopulate it's data.

     


    Darin MS

    Unfortunately, Darin, the OP's COA sticker is illegible :(
    Will the Licensing store fix work with the OEM_SLP Key? I hope to have the opportunity to test it on my own machine soon as I try to kill it prior to a Clean install of Win7 <vbeg>
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Dang, sorry.  I missed that.

    Darin MS
    Wednesday, June 15, 2011 10:05 PM