Answered by:
Virus-damaged or missing files in WGA for XP

Question
-
I am getting ready to copy files and programs and transfer some to a newer Windows 10 computer. I have been having troubles for several years, especially with running out of hard drive space, but I could never identify any issues other than simple clean-ups and defrags, which did little to help speed and operation, nor alleviate crashes and such. I performed many re-installations of programs, browsers, etc., which only helped a short while. While running deep scans a Trojan appeared, was identified, quarantined or would be deleted. Repeatedly it would get reinstalled. I used many programs, online and local. One final scan, from which antivirus program I am now unsure, identified it within a cookie. It was suggested that it may have spread to other cookies, so deleting all cookies and allowing new re-installations should correct the problem, so I followed the procedure. It also suggested a clean-up after verifying removal, which I also performed. After doing this my hard drive free space increased from 7% to 36% (~476 MB to ~2.448 GB). In the process, I had to re-install McAffee AV. I also found I was no longer receiving any software updates (such as Windows Malicious Software Removal Tool), found that Windows Update and Microsoft Update will not open nor function locally (so I must run it from online), and this is due to a partially damaged or partially missing Windows Genuine Advantage installation (I have never had any problem with this, though have read about many problems and uninstallation procedures). From another thread here, I followed a link to a diagnostic for WGA. Here are the results, minus my Product Key.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Genuine
Validation Code: 0
Cached Validation Code: N/A
Windows Product Key: *****-*****-*****-*****-*****
Windows Product Key Hash: 2V2VyxlfhiaCt/JkDzYQfiNOHMA=
Windows Product ID: 76477-OEM-2111907-00106
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 5.1.2600.2.00010300.3.0.hom
ID: {DE753AE8-0B81-481C-B543-6563DD8690C7}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-230-1
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A
Version: N/A
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-230-1
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Allowed
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DE753AE8-0B81-481C-B543-6563DD8690C7}</UGUID><Version>1.9.0027.0</Version><OS>5.1.2600.2.00010300.3.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-3PMFT</PKey><PID>76477-OEM-2111907-00106</PID><PIDType>2</PIDType><SID>S-1-5-21-1460156327-1332903272-1252988766</SID><SYSTEM><Manufacturer>ASUSTeK Computer INC.</Manufacturer><Model>RS482-SB400</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version> 3.15</Version><SMBIOSVersion major="2" minor="4"/><Date>20070125000000.000000+000</Date><SLPBIOS>HP PAVILION</SLPBIOS></BIOS><HWID>52293C0F0184C076</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Mountain Standard Time(GMT-07:00)</TimeZone><iJoin>0</iJoin><SBID><stat>2</stat><msppid></msppid><name>Hewlett-Packard Company</name><model>Compaq Presario</model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Licensing Data-->
N/A
Windows Activation Technologies-->
N/A
HWID Data-->
N/A
OEM Activation 1.0 Data-->
BIOS string matches: yes
Marker string from BIOS: 1E0D3:Compaq Computer Corporation|1E0D3:Compaq Computer Corporation|1E0D3:Hewlett-Packard Company|1D3A1:Hewlett-Packard Company
Marker string from OEMBIOS.DAT: HP PAVILION
OEM Activation 2.0 Data-->
N/A
After I remove the files I want, I plan to wipe many things from the hard drive and use this computer as a non-online gaming computer for the home. However, these missing or damaged files are causing glitches or temporary freezes, so I want to correct this before proceeding. I do not want to do a full re-installation of Windows XP and all programs and games, which would take so much time doing the years of updates to make it as current as possible, if I can get all of the updates anyway at this point. I cannot find online the Windows Genuine Advantage installation tool program to set up all files needed. I have checked but cannot find the downloaded file, if I can rerun it, and am not sure of its designation (example: KB 892130 ?), so I also ask for the correct program file and its designation. Can someone assist me and give me the file to run? Once I have properly re-installed Windows Genuine Advantage, will I need to re-install Windows Update and Microsoft Update as well, and if so, can I get those program files and designations as well? Yes, I realize Windows XP is old, but this computer will not handle a newer Windows version, and I do want to use this. Thanks for any assistance anyone can offer. -Jeff S.
Friday, September 9, 2016 11:18 AM
Answers
-
Your installation is showing as being genuine!
You would do far, far better by doing a complete reformat and reinstall of your XP machine - the obvious problem is whether you have the necessary disks, or can find copies anywhere. Windows Update will not install all the updates - merely those necessary to bring the machine up to date. this excludes a lot of ones which have been superceded.
You will need the following:
A copy of Windows XP Home Edition with SP2 - make sure that it's the OEM System Builder variant. (this at least will reduce the number of updates needed!)
The Product Key from the COA sticker on the machine.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Proposed as answer by Ed Price - MSFTMicrosoft employee, Owner Thursday, September 15, 2016 7:02 AM
- Marked as answer by Noel D PatonModerator Tuesday, September 27, 2016 7:55 AM
Monday, September 12, 2016 4:21 PMModerator