locked
Cannot determine if windows is valid RRS feed

  • Question

  •  

    Hi,

     

    I picked up a file called ctfmona.exe by accident which has now been removed but it is also causing problems with Windows Genuine Validation. The ctfmona.exe is listed when I search on internet as a piece of malware/spyware.

     

     

    I have tried to run MGADiag.exe but get a message saying "We are unable to determine whether your copy of Windows is genuine at this time"

     

    My laptop is provided by the company I work for and I know that the software is valid so I'm guessing that the ctfmona.exe has chnaged something.

     

    Any help would be greatly appreciated !

     

    I'm using Windows XP Pro.

     

    Details from diag are :

     

    Diagnostic Report (1.7.0095.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: N/A
    Cached Validation Code: N/A
    Windows Product Key: *****-*****-DR62G-8T46H-CTQBW
    Windows Product Key Hash: Kmt0gAB47emDgcFXz2Eq/d52cKk=
    Windows Product ID: 55274-640-3909833-23393
    Windows Product ID Type: 0
    Windows License Type: Unknown
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {8270D34C-CFBB-4FDA-B494-AD77846F056D}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic: 025D1FF3-171-1_025D1FF3-85-80004005
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A
    Version: N/A

    WGA Notifications Data-->
    Cached Result: 5
    File Exists: Yes
    Version: 1.7.18.7
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: Microsoft
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Edition 2003 - 100 Genuine
    OGA Version: Registered, 1.6.28.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-171-1_025D1FF3-85-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{8270D34C-CFBB-4FDA-B494-AD77846F056D}</UGUID><Version>1.7.0095.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-CTQBW</PKey><PID>55274-640-3909833-23393</PID><PIDType>0</PIDType><SID>S-1-5-21-1606980848-1390067357-682003330</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude D610                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="3"/><Date>20051002000000.000000+000</Date></BIOS><HWID>B4113D07018400D2</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>1B99B62D530F500</Val><Hash>kccThZSDZv/9wGV3irVCHIgqCXQ=</Hash><Pid>73931-640-1081997-57240</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="100"/><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/><App Id="44" Version="11" Result="100"/></Applications></Office></Software></GenuineResults> 

     

    Sunday, May 25, 2008 2:46 PM

Answers

  • John N 2008,

     

    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Edition 2003 - 100 Genuine
    OGA Version: Registered, 1.6.28.0


     

    The diagnostic tool indicates that the Windows XP Professional and Office Professional 2003 Edition is genuine.

    Please confer with IT department for removal of malware/spyware.

     

    These forums are for the support of Windows Genuine Advantage Validation issues.  Your post does not appear to be a Windows XP Activation or Validation related and is off-topic (as well as outside of my area of knowledge)

     

    I suggest reposting your question to one of the Windows XP Newsgroups at http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?dg=microsoft.public.windowsxp.general&lang=en&cr=US or go to http://support.microsoft.com for additional support options.

    Thank you,

     

    Lori MS
    Tuesday, May 27, 2008 9:27 PM

All replies

  • John N 2008,

     

    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Edition 2003 - 100 Genuine
    OGA Version: Registered, 1.6.28.0


     

    The diagnostic tool indicates that the Windows XP Professional and Office Professional 2003 Edition is genuine.

    Please confer with IT department for removal of malware/spyware.

     

    These forums are for the support of Windows Genuine Advantage Validation issues.  Your post does not appear to be a Windows XP Activation or Validation related and is off-topic (as well as outside of my area of knowledge)

     

    I suggest reposting your question to one of the Windows XP Newsgroups at http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?dg=microsoft.public.windowsxp.general&lang=en&cr=US or go to http://support.microsoft.com for additional support options.

    Thank you,

     

    Lori MS
    Tuesday, May 27, 2008 9:27 PM
  • Lori,

     

    Thanks for the reply.

     

    While at work today I had to make a change to the hosts file and noticed a #BLOCK WINDOWS GENUINE comment in there.

     

    I have now removed this and using script files as per the KB re-registered my product key this has now done something as I have been able to run all updates and the WGA tool with no issues.

     

    For anyone else who had the same "Genuine" issue as me I would advie them to check for Malware/Spyware and then check the host file.

     

    John.

     

     

    Tuesday, May 27, 2008 11:03 PM