locked
Windows Vista (TM) Build 6002 This copy of Windows is not genuine - RRS feed

  • Question

  • Toshiba Laptop with valid license key has this error after cleanup of malware "Personal Antivirus". Have run mcafee, malwarebytes and superantispyware and all seems to be clean now.

    I have followed instruction ifrom elsewher in this forum to manually replace license key to COA SLP and reset license store followed by phone activation. On clicking next after verbal authorisation number, get message that it is a non genuine copy.

    wga diagnostic follows:

    Diagnostic Report (1.9.0011.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50

    Cached Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-WJGP8-JMWPH-VTKXV
    Windows Product Key Hash: B9eSvTAvaZxcRKVoiF5+7uITfks=
    Windows Product ID: 89578-OEM-7218172-12902
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {543BD027-1ACF-4F2A-8EB9-0086E62F0C44}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.9.1
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.lh_sp2rtm.090410-1830
    TTS Error: T:20090907162645657-
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: 6.0.6002.16398

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    2007 Microsoft Office system - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{543BD027-1ACF-4F2A-8EB9-0086E62F0C44}</UGUID><Version>1.9.0011.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VTKXV</PKey><PID>89578-OEM-7218172-12902</PID><PIDType>8</PIDType><SID>S-1-5-21-2009985302-3670527864-2412643967</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite M200</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>1.20   </Version><SMBIOSVersion major="2" minor="4"/><Date>20070626000000.000000+000</Date></BIOS><HWID>29313507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSINV</OEMID><OEMTableID>TOSINV00</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>85B7ACD1AB83778</Val><Hash>lLmhqOHLz78vxD4o/GNxFbCV1lY=</Hash><Pid>81605-956-5839395-65827</Pid><PidType>1</PidType></Product><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: U1BMRwEAAAAAAQAABAAAAFwGAAAAAAAAYWECADAgAAAQt5grhC/KAdKUkVDxCoM358lePs/mGn1mN2fCrDoSbiq0o+4pqBgSFgmJ9Wu5xptP+zvuEFHasjOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAyuPJYEjuzrM7pi8z8IgTuMbquphuJrQ2oB7MTDsd83yjQD1ojv7Nh82wG7LABJ8nszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomePremium edition
    Description: Windows Operating System - Vista, OEM_COA_SLP channel
    Activation ID: a4eec485-e375-48b4-8f51-80d13a4086b6
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89578-00144-181-712902-02-3081-6002.0000-2602009
    Installation ID: 088656986270904535350710127330953344023274072655407384
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: VTKXV
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).

    HWID Data-->
    HWID Hash Current: NAAAAAEAAgABAAIAAQABAAAAAwABAAEAeqigpeYmrCvqTljJ0vdgVfL0Nm/Q1FDDrFYqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   INTEL   CALISTGA
      FACP   TOSINV  TOSINV00
      HPET   INTEL   CALISTGA
      BOOT   PTLTD   $SBFTBL$
      MCFG   INTEL   CALISTGA
      TCPA   PTLTD   CALISTGA
      APIC   INTEL   CALISTGA
      SLIC   TOSINV  TOSINV00
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri

     

     

     

    Thursday, September 17, 2009 7:08 AM

Answers

  • Hello CT-Owen,

      You did the correct thing by changing the Product Key and it should have worked.

      Your Diagnostic Report does show that a Temper event has occured  (TTS Error: T:20090907162645657- meaning the last Tamper occured on Sep 07 2009 at 4:26 PM) but that doesn't explain why your Activation attempted failed.

      The Product Key does, in fact, appear to be Genuine, so I can only assume that the malware "Personal Antivirus" damaged something in Vista that is causing the Activation failure.


    At this point I don't know where the damage is or how to fix it, but I can suggest trying a System Scan.  The Scan will try to detect corrupt or damaged Vista files and repair them, if possible.

     
    1) Login to Vista in Normal Mode (not safe mode)
    2) Launch an Internet Browser
    3) Type: %windir%\system32\ in the browser's address field
    4) Scroll down till you find the file cmd.exe
    5) Right-click the file and select 'Run as Administrator'
    6) In the CMD window, type: sfc /scannow
    7) Reboot twice and see if that resolves the issue.


    (Note: If you get a message that the scan found corrupt files but was unable to repair some (or all) of them, it's a good indication that your Vista is damaged and you should assumed that it will function erratically because of the damage.  At that point, my only other suggestion would be to either contact Vista Support at http://support.microsoft.com or backup all your importent files off the PC and reinstall Vista) 


    Very sorry I couldn't be more help,
    Darin MS
    • Marked as answer by Darin Smith MS Thursday, September 17, 2009 7:49 PM
    Thursday, September 17, 2009 7:48 PM