Answered by:
Windows Vista (TM) Build 6002 This copy of Windows is not genuine -

Question
-
Toshiba Laptop with valid license key has this error after cleanup of malware "Personal Antivirus". Have run mcafee, malwarebytes and superantispyware and all seems to be clean now.
I have followed instruction ifrom elsewher in this forum to manually replace license key to COA SLP and reset license store followed by phone activation. On clicking next after verbal authorisation number, get message that it is a non genuine copy.
wga diagnostic follows:
Diagnostic Report (1.9.0011.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50Cached Validation Code: 0xc004c4a8
Windows Product Key: *****-*****-WJGP8-JMWPH-VTKXV
Windows Product Key Hash: B9eSvTAvaZxcRKVoiF5+7uITfks=
Windows Product ID: 89578-OEM-7218172-12902
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.0.6002.2.00010300.2.0.003
ID: {543BD027-1ACF-4F2A-8EB9-0086E62F0C44}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.9.9.1
Signed By: Microsoft
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6002.lh_sp2rtm.090410-1830
TTS Error: T:20090907162645657-
Validation Diagnostic:
Resolution Status: N/AWgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: 6.0.6002.16398WGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: 2.0.48.0
OGAExec.exe Signed By: Microsoft
OGAAddin.dll Signed By: MicrosoftOGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional 2007 - 100 Genuine
2007 Microsoft Office system - 100 Genuine
OGA Version: Registered, 2.0.48.0
Signed By: Microsoft
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{543BD027-1ACF-4F2A-8EB9-0086E62F0C44}</UGUID><Version>1.9.0011.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VTKXV</PKey><PID>89578-OEM-7218172-12902</PID><PIDType>8</PIDType><SID>S-1-5-21-2009985302-3670527864-2412643967</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite M200</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>1.20 </Version><SMBIOSVersion major="2" minor="4"/><Date>20070626000000.000000+000</Date></BIOS><HWID>29313507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSINV</OEMID><OEMTableID>TOSINV00</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>85B7ACD1AB83778</Val><Hash>lLmhqOHLz78vxD4o/GNxFbCV1lY=</Hash><Pid>81605-956-5839395-65827</Pid><PidType>1</PidType></Product><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 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
Licensing Data-->
Software licensing service version: 6.0.6002.18005
Name: Windows(TM) Vista, HomePremium edition
Description: Windows Operating System - Vista, OEM_COA_SLP channel
Activation ID: a4eec485-e375-48b4-8f51-80d13a4086b6
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 89578-00144-181-712902-02-3081-6002.0000-2602009
Installation ID: 088656986270904535350710127330953344023274072655407384
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
Partial Product Key: VTKXV
License Status: Notification
Notification Reason: 0xC004F200 (non-genuine).HWID Data-->
HWID Hash Current: NAAAAAEAAgABAAIAAQABAAAAAwABAAEAeqigpeYmrCvqTljJ0vdgVfL0Nm/Q1FDDrFYqhQ==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20000
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INTEL CALISTGA
FACP TOSINV TOSINV00
HPET INTEL CALISTGA
BOOT PTLTD $SBFTBL$
MCFG INTEL CALISTGA
TCPA PTLTD CALISTGA
APIC INTEL CALISTGA
SLIC TOSINV TOSINV00
SSDT SataRe SataPri
SSDT SataRe SataPri
SSDT SataRe SataPri
SSDT SataRe SataPri
SSDT SataRe SataPriThursday, September 17, 2009 7:08 AM
Answers
-
Hello CT-Owen,
You did the correct thing by changing the Product Key and it should have worked.
Your Diagnostic Report does show that a Temper event has occured (TTS Error: T:20090907162645657- meaning the last Tamper occured on Sep 07 2009 at 4:26 PM) but that doesn't explain why your Activation attempted failed.
The Product Key does, in fact, appear to be Genuine, so I can only assume that the malware "Personal Antivirus" damaged something in Vista that is causing the Activation failure.
At this point I don't know where the damage is or how to fix it, but I can suggest trying a System Scan. The Scan will try to detect corrupt or damaged Vista files and repair them, if possible.
1) Login to Vista in Normal Mode (not safe mode)
2) Launch an Internet Browser
3) Type: %windir%\system32\ in the browser's address field
4) Scroll down till you find the file cmd.exe
5) Right-click the file and select 'Run as Administrator'
6) In the CMD window, type: sfc /scannow
7) Reboot twice and see if that resolves the issue.
(Note: If you get a message that the scan found corrupt files but was unable to repair some (or all) of them, it's a good indication that your Vista is damaged and you should assumed that it will function erratically because of the damage. At that point, my only other suggestion would be to either contact Vista Support at http://support.microsoft.com or backup all your importent files off the PC and reinstall Vista)
Very sorry I couldn't be more help,
Darin MS- Marked as answer by Darin Smith MS Thursday, September 17, 2009 7:49 PM
Thursday, September 17, 2009 7:48 PM