1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Re :Repair virus damage

Discussion in 'Windows 7' started by Vegy, Jun 9, 2015.

Thread Status:
Not open for further replies.
Advertisement
  1. Vegy

    Vegy Thread Starter

    Joined:
    Aug 15, 2011
    Messages:
    91
    9.6.15 Hi
    I have 6 years old Toshiba Satellite A300 1MC, which has been attacked by a virus corrupting a lot of files, some can’t be removed, as well as, browsers’ settings. Originally I had Vista Home premium which has been replaced by a local vendor to Genuine Windows 7 Home Premium 32 bits with product ID.
    Because of the damage I have been told that Windows 7 has to be reinstalled. But eventually I have found out that Microsoft has blocked reinstallation. The explanation has been that the version of Windows 7 I have with product key ending 3Q6C9 can have only one activation because Toshiba bought it cheaply in bulk & has the license for the product. In addition it hasn’t validated the product key that 3 key finders stated that I have. Instead it has referred me to Toshiba for product key. MSM also said that my computer is SLP & I have in the’ MSM Genuine Advantage Diagnosis’ OEM (which I don’t understand). They also said I should ask Toshiba for a recovery disc, but as far as I know this would apply only to Vista & not to Windows 7.
    My question is what is the list difficult way to resolve the catastrophe? Does it mean that I have first to return Vista at factory state & only then attempt to install new windows 7 or windows 10? If yes how do I do it?
    If I find out the acceptable product key related to Product ID 00359 OEM 8992687 00010? If yes how can it help?


    Tech Support Guy System Info Utility version 1.0.0.2
    OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 32 bit
    Processor: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz, x64 Family 6 Model 15 Stepping 13
    Processor Count: 2
    RAM: 2939 Mb
    Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 1341 Mb
    Hard Drives: C: Total - 152362 MB, Free - 100390 MB; D: Total - 151280 MB, Free - 133952 MB;
    Motherboard: TOSHIBA, Portable PC
    Antivirus: BullGuard Antivirus, Updated and Enabled
     
  2. Macboatmaster

    Macboatmaster Trusted Advisor Spam Fighter

    Joined:
    Jan 14, 2010
    Messages:
    21,156
    I do not know - from where you received this information

    but I can assure you that is nothing to do with Toshiba buying it cheaply.

    An OEM is Original equipment manufacturer
    http://www.microsoft.com/oem/en-gb/licensing/antipiracy/Pages/COA_hologram.aspx#fbid=j6AF3fyMmcz

    as you can see from the image on the link - he provides in the case of Windows 7 a COA with the OEM key

    Your product key finder has found NOT that key because of course you never had it, as the system as you say had Vista on it.

    The
    local vendor who installed this GENUINE Windows 7 - should have provided you with the COA OEM key either on the computer OR with the installation DVD


    The product ID is NOT the means of activating windows - it simply identifies the product and some details of the licence source - eg OEM - Retail - OEM System Builder etc.


    So it appears that your product key finder has found the OEM SLP key which is used to install the OS on a whole block of - of in your case Toshiba computers


    However that key will not activate windows when reinstalled as the SLP key

    OEM SLP: This key comes pre-installed in Windows, when it comes from the Factory. This key is geared to work with the special instructions found only on that Manufacturer's computer hardware. So when Windows was installed using the OEM SLP key (at the factory) Windows 7 looks at the motherboard and sees the special instructions and Self-Activates


    SLP meaning System Locked Pre-Installation
    A System Locked Pre-installation key, or SLP key, is a product key that does NOT require activation, and is used by major OEMs (Dell, HP, Lenovo, etc.) with Windows Pre-installation deployments


    SO in summary if the local vendor used a OEM SLP install and did NOT provide you with a COA product key then something was not right


    AND once Microsoft established - if they did - that the OEM SLP key had been obtained improperly they would BLOCK it.


    The answer therefore is to contact - if they are still available - the local vendor.


    Return to Vista - that of course depends on if you have the means to do so


    Install NEW 7 - where from? you still need a genuine and available for use licence


    Windows 10 will be a free upgrade from Windows 7 SP1 or from 8.1 (update 1)
    It will not be free from XP or Vista
    Whether a discount will be offered remains to be seen.
     
    Last edited: Jun 9, 2015
  3. Vegy

    Vegy Thread Starter

    Joined:
    Aug 15, 2011
    Messages:
    91


    10.6.15
    Thanks Macboutmaster
    After my well paid repair case at MSM Answer Desk it has practically been stopped (using farcical excuses), I have managed to get this information from: http://support.microsoft.com/en-us/answerdesk/chat.


    I haven’t received from the shop which has installed the Win.7 any COA & I doubt I would, only on the computer system I have been shown an icon saying Genuine Windows. In the Learn more Microsoft was saying that this is an authorized copy of Win 7 which will receive updates. Nothing about one time activation.


    From what you say it seems that even if I get the COA from the vendor or maybe Toshiba the OEM &SLR would still stop re installation of Win 7.


    I don’t know how to get back to Vista & it seems the subscription to Microsoft isn’t working. Can you advise?


    If I manage to get back to Vista it probably would be cheaper to install a new Win. 7 & then get Win. 10 free.

    Alternatively to try to sell my Toshiba laptop & get a new one with Win 10?
    P.s. I am in UK.
    .
     
  4. Vegy

    Vegy Thread Starter

    Joined:
    Aug 15, 2011
    Messages:
    91
    10.6.15

    Thanks again Macboatmaster

    Since it seems the browsers setting have been damaged, I have forgotontten to ask if going back to Vista would correct it & I don't need additional user's account?
     
  5. Macboatmaster

    Macboatmaster Trusted Advisor Spam Fighter

    Joined:
    Jan 14, 2010
    Messages:
    21,156
    who please has been advising you on this issue.

    Having read the post again I am a little confused, I am sure this is my fault

    Windows 7 is currently installed and working I presume as you have attached the sys info.

    Have you attempted the reinstall and if so from where please as I presume perhaps wrongly that you do no have the installation dvd

    Your link on post 3 does not take me to your answer desk chat


    If the computer is currently running and 7 is still installed and working send this please


    Please run the MGA Diagnostic Tool and post back the report it creates:

    • Download MGADiag to your desktop.
    • Double-click on MGADiag.exe to launch the program
    • Click "Continue"
    • Ensure that the "Windows" tab is selected (it should be by default).
    • Click the "Copy" button to copy the MGA Diagnostic Report to the Windows clipboard.
    • Paste the MGA Diagnostic Report back here in your next reply.
     
  6. Vegy

    Vegy Thread Starter

    Joined:
    Aug 15, 2011
    Messages:
    91
    10.6.15

    Thanks Macboatmaster

    As I have stated MSM Answer Desk technical support has started to work on my paid case eventually has download windows 7 disc to my laptop using another product key from the one I have found, but it has failed. Then progress of the repair has practically stopped by giving unreasonable excuses. Eventually I contacted http://support.microsoft.com/en-us/answerdesk/chat. (This works fine now) & have got the information I have given you.

    Windows 7 is half working because it has been found that there are still corrupt files which can’t be removed. In addition loading of web pages is a nightmare the wheel are endlessly spinning & more.

    I enclose the . MGADiag dialog including its Windows page, its Licensing page & additional window of Windows 7 validation which appears afterward.

    I hope these would resolve misunderstandings.
    Sorry the Manage attachment don't open. Is there other way I can send you the required documents?
     
  7. Macboatmaster

    Macboatmaster Trusted Advisor Spam Fighter

    Joined:
    Jan 14, 2010
    Messages:
    21,156
    you have sent me back the download of mga I sent you
    please follow my note
    Download MGADiag to your desktop.
    Double-click on MGADiag.exe to launch the program
    Click "Continue"
    Ensure that the "Windows" tab is selected (it should be by default).
    Click the "Copy" button to copy the MGA Diagnostic Report to the Windows clipboard.
    Paste the MGA Diagnostic Report back here in your next reply


    you do not manage any attachment
    you paste the copy of the report
     
  8. Vegy

    Vegy Thread Starter

    Joined:
    Aug 15, 2011
    Messages:
    91
  9. Macboatmaster

    Macboatmaster Trusted Advisor Spam Fighter

    Joined:
    Jan 14, 2010
    Messages:
    21,156
    I cannot understand why you are attaching files
    It is simply a matter of copying the information on the windows tab of mga
    and pasting that info to your reply


    NO attachments are necessary or required.
    Please see screenshot
     

    Attached Files:

  10. Vegy

    Vegy Thread Starter

    Joined:
    Aug 15, 2011
    Messages:
    91
    11.6.15
    Hi Macboatmaster
    I am sorry about the inconvenience. But my laptop hardly works a lot of files are corrupt. What is '"simply" for an IT expert is almost Chinese for an IT beginner. I have tried the clipboard advice, I have tried the site's advise for vein. I'll try again. However you yourself has said Microsoft found something not all right. Hence how to go to Vista factory state might be the solution in case there is still a virus in the recovery system.
     
  11. Macboatmaster

    Macboatmaster Trusted Advisor Spam Fighter

    Joined:
    Jan 14, 2010
    Messages:
    21,156
    Open notepad
    that is windows start button
    all programs
    accessories


    run the MGA
    click on the windows tab
    click copy
    open notepad from the taskbar
    right click the blank white space and click paste
    does the report appear
    if so click file and save as
    save it as a file to desktop


    come back here and on reply in this white box
    open the saved notepad file
    click the edit tab
    click select all
    click the edit tab
    click copy
    then right click the white panel where you are typing your reply here and click paste
     
  12. Vegy

    Vegy Thread Starter

    Joined:
    Aug 15, 2011
    Messages:
    91
    Hi Macboatmaster
    Here is what I have managed:
    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
    Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
    Windows Product ID: 00359-OEM-8992687-00010
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.2.0.000
    ID: {87282F35-FC8C-45D9-B45D-BEA9DFDD85B9}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Microsoft Windows XP
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.150525-0603
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{87282F35-FC8C-45D9-B45D-BEA9DFDD85B9}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010300.2.0.000</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-721479924-539738877-3687998050</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite A300</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>2.20</Version><SMBIOSVersion major="2" minor="4"/><Date>20091207000000.000000+000</Date></BIOS><HWID>D4563207018400EA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>5B4594CBFFA9F3A</Val><Hash>DbSigfqOXbLA9aRn80519UM4Uvc=</Hash><Pid>81602-925-1016094-68577</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800010-02-2057-7600.0000-1052015
    Installation ID: 006444208955497093094771656071144273027143582196813123
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 3Q6C9
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 11/06/2015 13:16:15

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: PASS
    Event Time Stamp: 6:9:2015 13:16
    WAT Activex: Registered
    WAT Admin Service: Registered

    HWID Data-->
    HWID Hash Current: NgAAAAEABAABAAIAAAACAAAAAgABAAEAeqgkHc66MAbenS6p1FTw0/TROgzyLtRfMIZKqSqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC TOSINV TOSINV00
    FACP TOSINV TOSINV00
    HPET TOSINV TOSINV00
    BOOT TOSINV TOSINV00
    MCFG TOSINV TOSINV00
    ASF! TOSINV TOSINV00
    SLIC ACRSYS ACRPRDCT
    SSDT PmRef CpuPm
     
  13. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    111,600
    Something is definitely wrong with that installation.

    You have an Acer BIOS marker on a Toshiba machine. Since W7 was not the original operating system, you can't use an OEM license anyway. Windows 7 should be reinstalled using a purchased full retail version or use the key on the COA sticker and return to Vista.
     
  14. Vegy

    Vegy Thread Starter

    Joined:
    Aug 15, 2011
    Messages:
    91
    11.6.15


    Thanks Cookiegal


    As I understand you telling me that MSM has been correct by blocking a reinstall of Win.7, but its eamhaAnswer Desk technical support team which has been running my case hasn't cared to tell me why have they stopped doing the job.



    I haven’t got a COA & needless to say I wouldn’t get it from the local vendor. When I received the laptop I have inquired about product key & I have been shown a Genuine Windows sticker on my system. Also MSM said it is a genuine copy of Win.7 which will receive updates .nothing about OEM. So I had it.


    However Toshiba is willing to sell me a Media Recovery USB which would bring the computer to factory state. This would get rid of the very corrupted FF & in case there is still a hidden virus (which I have reasons to suspect) I believe it would get rid of it as well.
     
  15. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    111,600
    There's no need to type the date at the top of your posts (I assume that's what those numbers mean). Every post is time stamped. :)

    To further complicate things, the key in use is from a Hewlett-Packard. I don't know how you say MS is blocking reinstallation but they likely see the key doesn't belong on this machine.

    The factory reset using the USB media sent by Toshiba should fix the problems. That will take you back to the original operating system which I believe you said was Vista.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1149695

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice