HELP!!! Virus mimics WGA?

[Guest]

My daughter is using my computer while hers is in the shop. Today she got a
WGA-like dialog box that ways " This copy of windows is not genuine. You may
be a victim of counterfeit software". It is my computer and every piece of
microsoft software on it is legitimate. However, as I understand it, WGA
only puts that message on the screen. Her machine has essentially been
locked up. Two new accounts have been created, one titled "ASP.NET MAchine
Account" and one titled guest. All accounts on the machine have been
passworded and can not be accesssed. Starting up in Safe mode, the result is
similar. The extra accounts are gone, but the existing accounts have been
passworded and are not accessible. I have searched McAfee and Symanec with
no results. She REALLY needs this machine for schoolwork. Can anyone point
me to any information on how to recover this machine?

Thanks for any help,

Al

 

[Pennywise]

|>My daughter is using my computer while hers is in the shop. Today she got a
|>WGA-like dialog box that ways " This copy of windows is not genuine. You may
|>be a victim of counterfeit software". It is my computer and every piece of
|>microsoft software on it is legitimate. However, as I understand it, WGA
|>only puts that message on the screen. Her machine has essentially been
|>locked up. Two new accounts have been created, one titled "ASP.NET MAchine
|>Account" and one titled guest. All accounts on the machine have been
|>passworded and can not be accesssed. Starting up in Safe mode, the result is
|>similar. The extra accounts are gone, but the existing accounts have been
|>passworded and are not accessible. I have searched McAfee and Symanec with
|>no results. She REALLY needs this machine for schoolwork. Can anyone point
|>me to any information on how to recover this machine?

Net and Guest are good (ligit) system accounts, yet guest should be
disabled. Net is required for .NET

Reading the newsgroups everybody is having problems with WGA.

 

[Pennywise]

|>My daughter is using my computer while hers is in the shop. Today she got a
|>WGA-like dialog box that ways " This copy of windows is not genuine. You may
|>be a victim of counterfeit software". It is my computer and every piece of
|>microsoft software on it is legitimate. However, as I understand it, WGA
|>only puts that message on the screen. Her machine has essentially been
|>locked up. Two new accounts have been created, one titled "ASP.NET MAchine
|>Account" and one titled guest. All accounts on the machine have been
|>passworded and can not be accesssed. Starting up in Safe mode, the result is
|>similar. The extra accounts are gone, but the existing accounts have been
|>passworded and are not accessible. I have searched McAfee and Symanec with
|>no results. She REALLY needs this machine for schoolwork. Can anyone point
|>me to any information on how to recover this machine?

ReReading this I take it you deleted the Net account. if this is the
case you pry need to reinstall .Net - http://tinyurl.com/7vshz

you might be able to create a "ASP.NET Machine Account" yourself it's
a member of the Users group - no clue what you'd use as a password -
but it never expires nor can be changed

The Guest account isn't that big of a deal.

To remove WGA
http://www.google.com/search?hl=en&q=disable+wga&btnG=Google+Search
and turn off your updates

 

[Carey Frisch [MVP]]

Go to www.microsoft.com/genuine and revalidate. Reboot your computer after this is done.
Let us know us if this fixes the issue.
Sometimes revalidating and rebooting correctly syncs the Windows library files.

If not try this:

Please click start, then run, then type in "wgatray.exe /b" then press enter.
After that, log off and log back on.

If still no resolution, then:

Please follow this simple troubleshooting procedure:

1. Download and install the MGA Diagnostic Tool:
http://go.microsoft.com/fwlink/?linkid=56062

2. After running the WGA Diagnostic Tool, click
on the "Validation" tab and then click on "Copy to Clipboard".

3. Next, visit the following website and create a post in the
"WGA Validation Problems" forum and paste the
results of the WGA Diagnostic Data in a detailed post.
http://forums.microsoft.com/Genuine/default.aspx?SiteID=25

4. A WGA troubleshooting specialist will analyze the data and
recommend an appropriate solution.

--
Carey Frisch
Microsoft MVP
Windows - Shell/User
Microsoft Community Newsgroups
news://msnews.microsoft.com/

---------------------------------------------------------------------------­----------------

:

| My daughter is using my computer while hers is in the shop. Today she got a
| WGA-like dialog box that ways " This copy of windows is not genuine. You may
| be a victim of counterfeit software". It is my computer and every piece of
| microsoft software on it is legitimate. However, as I understand it, WGA
| only puts that message on the screen. Her machine has essentially been
| locked up. Two new accounts have been created, one titled "ASP.NET MAchine
| Account" and one titled guest. All accounts on the machine have been
| passworded and can not be accesssed. Starting up in Safe mode, the result is
| similar. The extra accounts are gone, but the existing accounts have been
| passworded and are not accessible. I have searched McAfee and Symanec with
| no results. She REALLY needs this machine for schoolwork. Can anyone point
| me to any information on how to recover this machine?
|
| Thanks for any help,
|
| Al

 

[Alias]

Go to www.microsoft.com/genuine and revalidate. Reboot your computer after this is done.
Let us know us if this fixes the issue.
Sometimes revalidating and rebooting correctly syncs the Windows library files.

If not try this:

Please click start, then run, then type in "wgatray.exe /b" then press enter.
After that, log off and log back on.

If still no resolution, then:

Please follow this simple troubleshooting procedure:

1. Download and install the MGA Diagnostic Tool:
http://go.microsoft.com/fwlink/?linkid=56062

2. After running the WGA Diagnostic Tool, click
on the "Validation" tab and then click on "Copy to Clipboard".

3. Next, visit the following website and create a post in the
"WGA Validation Problems" forum and paste the
results of the WGA Diagnostic Data in a detailed post.
http://forums.microsoft.com/Genuine/default.aspx?SiteID=25

4. A WGA troubleshooting specialist will analyze the data and
recommend an appropriate solution.

And why or why should a paying customer have to jump through these hoops
instead of using their computer!? Why oh why does MS think it has a
right to bully paying customers to help them catch the thieves?

If MS feels someone has stolen something from them, they should call the
appropriate legal authorities, not force paying customers to do police
work!!!

Alias

 

[Gaoler]

And why or why should a paying customer have to jump through these hoops
instead of using their computer!? Why oh why does MS think it has a
right to bully paying customers to help them catch the thieves?

If MS feels someone has stolen something from them, they should call the
appropriate legal authorities, not force paying customers to do police
work!!!

Alias

Righto Alias! I have never heard of Gucci or Rollex treating their
paying customers like criminals just because their products are often
pirated. MS has it all wrong!

 

[Leythos]

Righto Alias! I have never heard of Gucci or Rollex treating their
paying customers like criminals just because their products are often
pirated. MS has it all wrong!

And neither of those companies provide free watches to replace the fakes
that idiots bought.

 

[Don Taylor]

And neither of those companies provide free watches to replace the fakes
that idiots bought.

And when was the last time you saw Rolex announce to the world
that their employees FU&KED up for the ten thousanth time this
year and it was critical that you get a new version of your Rolex
because the one they sold you was screwed up?

 

[Leythos]

And when was the last time you saw Rolex announce to the world
that their employees FU&KED up for the ten thousanth time this
year and it was critical that you get a new version of your Rolex
because the one they sold you was screwed up?

How does that apply to all the customers that were screwed when they
bought fake watches or pirated copies of XP? We're talking about piracy,
not service patches.

 

[Alias]

And when was the last time you saw Rolex announce to the world
that their employees FU&KED up for the ten thousanth time this
year and it was critical that you get a new version of your Rolex
because the one they sold you was screwed up?

LOL!

Alias

 

[Don Taylor]

How does that apply to all the customers that were screwed when they
bought fake watches or pirated copies of XP? We're talking about piracy,
not service patches.

Who started the comparison, included above, between Microsoft and Rolex?
Ask them.

 

[Rhonda Lea Kirk]

LOL!

All laughter aside, I haven't heard of Gucci and Rolex confiscating or
otherwise rendering unusable the pirated watches.

rl
--
Rhonda Lea Kirk

Insisting on perfect safety is for people
without the balls to live in the real world.
Mary Shafer Iliff

 

[Plato]

And neither of those companies provide free watches to replace the fakes
that idiots bought.

Agreed.

 

[Gaoler]

And neither of those companies provide free watches to replace the fakes
that idiots bought.

So here Leythos demonstrates his absolutely horrendous customer service
again by referring to customers as idiots.

 

[Bob I]

So here Leythos demonstrates his absolutely horrendous customer service
again by referring to customers as idiots.

YOU are the one that made that association, NOT Leythos.

 

[Guest]

Cary -

Thanks for the suggestions, but....everyone seems to have missed the point
of my post.

I can not use the computer. Whatever has happened on the machine has
created the two new accounts (which were not there, or at least were not
visible, before) and passworded all acounts with an unknown password. This
does not sound like the effects of the WGA. My assumption is that this is a
trojan horse of some type to get everyone all pi#$ed off at MS.

 

[Steve N.]

My daughter is using my computer while hers is in the shop. Today she got a
WGA-like dialog box that ways " This copy of windows is not genuine. You may
be a victim of counterfeit software". It is my computer and every piece of
microsoft software on it is legitimate. However, as I understand it, WGA
only puts that message on the screen. Her machine has essentially been
locked up. Two new accounts have been created, one titled "ASP.NET MAchine
Account" and one titled guest. All accounts on the machine have been
passworded and can not be accesssed. Starting up in Safe mode, the result is
similar. The extra accounts are gone, but the existing accounts have been
passworded and are not accessible. I have searched McAfee and Symanec with
no results. She REALLY needs this machine for schoolwork. Can anyone point
me to any information on how to recover this machine?

Thanks for any help,

Al

Try this:

http://home.eunet.no/pnordahl/ntpasswd/

Steve N.

 

[Steve N.]

Go to www.microsoft.com/genuine and revalidate. Reboot your computer after this is done.
Let us know us if this fixes the issue.
Sometimes revalidating and rebooting correctly syncs the Windows library files.

If not try this:

Please click start, then run, then type in "wgatray.exe /b" then press enter.
After that, log off and log back on.

If still no resolution, then:

Please follow this simple troubleshooting procedure:

1. Download and install the MGA Diagnostic Tool:
http://go.microsoft.com/fwlink/?linkid=56062

2. After running the WGA Diagnostic Tool, click
on the "Validation" tab and then click on "Copy to Clipboard".

3. Next, visit the following website and create a post in the
"WGA Validation Problems" forum and paste the
results of the WGA Diagnostic Data in a detailed post.
http://forums.microsoft.com/Genuine/default.aspx?SiteID=25

4. A WGA troubleshooting specialist will analyze the data and
recommend an appropriate solution.

And how do you propose he do that when he can't even login to Windows?

Steve N.

 

[Steve N.]

YOU are the one that made that association, NOT Leythos.

LOL!

Learn to read.

Steve N.

 

[Steve N.]

LOL!

Alias

Why was this post of Rhonda's pulled?

All laughter aside, I haven't heard of Gucci and Rolex confiscating or
otherwise rendering unusable the pirated watches.

rl
--
Rhonda Lea Kirk

Insisting on perfect safety is for people
without the balls to live in the real world.
Mary Shafer Iliff

Steve N.