error 0xC004D302 after virus attack

Question

Hi everybody ! My computer (Acer eMachines) was infected with the virus police ukash. The version of this one deleted all restore data. Then I cleaned it with a Livecd with RogueKiller and Malwarebytes.

After reboot, the desk is ok, the virus seems to be dead.

But Vista say that the copy is not authentic ... (Vista Home Basic)

I tried a new activation by Internet with the key on the label of the computer. But it says that it'snot the good version !

I called Microsoft to make an activation by phone but the server ask me an Id of installation. I don't know where I can find it because I don't have the choice between Activation by Net or by Phone.

I tried slui.exe 4 => no change

I tried with slmgr -rilc slmgr -rearm => then I received the error in objet. In details : The security processor reported that the trusted data store was rearmed.

It's possible I've already re-install Vista on this computer, with a Dell DVD, but with the key on his label.

What can I do before to reinstall all ???

Thanks a lot, I hope my english isn't too bad !!

Answer 1

I tried   by phone with the ID Installation  I red in the Diagnostic Report, but the Microsoft server said it cannot make the activation ... What can I do ?

Answer 2

Hi Sandeep, thanks for your reply.

Then I tried the step 1 as in your link. Résult : The key isn't for this version. I'm sure the version is the same !

Thus I tried the step 2. Résult : You must reinstall Vista. But I tried the Activation by the microsoft website. Don't working. An error "fr fr download handoff aspx id 0 LogitCheckError 50"

There is the rapport of the WGA diagnostic made before this two steps. I see the Installation ID then I'll try the phone Activation ...

Diagnostic Report (1.9.0027.0):

---

Windows Validation Data-->

Validation Status: Genuine

Validation Code: 0

Cached Online Validation Code: N/A, hr = 0xc004f012

Windows Product Key: *****-*****-F4GJK-KG77H-B9HD2

Windows Product Key Hash: iJAth4TbScMi8HdcPurlASXdEkw=

Windows Product ID: 89578-OEM-7332157-00204

Windows Product ID Type: 2

Windows License Type: OEM SLP

Windows OS version: 6.0.6002.2.00010300.2.0.003

ID: {90293315-4B66-4243-B5D0-CFAF6F846767}(1)

Is Admin: Yes

TestCab: 0x0

LegitcheckControl ActiveX: N/A, hr = 0x80070002

Signed By: N/A, hr = 0x80070002

Product Name: Windows Vista (TM) Home Premium

Architecture: 0x00000000

Build lab: 6002.vistasp2_gdr.130501-1537

TTS Error:

Validation Diagnostic:

Resolution Status: N/A

Vista WgaER Data-->

ThreatID(s): N/A, hr = 0x80070002

Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->

Cached Result: N/A, hr = 0x80070002

File Exists: No

Version: N/A, hr = 0x80070002

WgaTray.exe Signed By: N/A, hr = 0x80070002

WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->

Cached Result: N/A, hr = 0x80070002

Version: N/A, hr = 0x80070002

OGAExec.exe Signed By: N/A, hr = 0x80070002

OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->

Office Status: 109 N/A

OGA Version: N/A, 0x80070002

Signed By: N/A, hr = 0x80070002

Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->

Proxy settings: N/A

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe

Download signed ActiveX controls: Prompt

Download unsigned ActiveX controls: Disabled

Run ActiveX controls and plug-ins: Allowed

Initialize and script ActiveX controls not marked as safe: Disabled

Allow scripting of Internet Explorer Webbrowser control: Disabled

Active scripting: Allowed

Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->

Office Details: <GenuineResults><MachineData><UGUID>{90293315-4B66-4243-B5D0-CFAF6F846767}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-B9HD2</PKey><PID>89578-OEM-7332157-00204</PID><PIDType>2</PIDType><SID>S-1-5-21-997645277-2138534882-3604745664</SID><SYSTEM><Manufacturer>eMachines</Manufacturer><Model>EL1300              </Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>R01-A2</Version><SMBIOSVersion major="2" minor="5"/><Date>20090410000000.000000+000</Date></BIOS><HWID>5A313507018400F8</HWID><UserLCID>040C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Paris, Madrid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->

Version du service de licences logicielles : 6.0.6002.18005

Nom : Windows(TM) Vista, HomePremium edition

Description : Windows Operating System - Vista, OEM_SLP channel

ID d’activation : bffdc375-bbd5-499d-8ef1-4f37b61c895f

ID d’application : 55c92734-d682-4d71-983e-d6ec3f16059f

PID étendu : 89578-00146-321-500204-02-1036-6001.0000-0942011

ID d’installation : 012993944471362211131836708541343686493843237082852386

URL du certificat du processeur : http://go.microsoft.com/fwlink/?LinkID=43473

URL du certificat de l’ordinateur : http://go.microsoft.com/fwlink/?LinkID=43474

URL de licence d’utilisation : http://go.microsoft.com/fwlink/?LinkID=43476

URL du certificat de clé de produit : http://go.microsoft.com/fwlink/?LinkID=43475

Clé de produit partielle : B9HD2

État de la licence : période de grâce initiale

Temps restant : 21600 minute(s) (15 jour(s))

Windows Activation Technologies-->

N/A

HWID Data-->

HWID Hash Current: MgAAAAEAAwABAAEAAQABAAAAAgABAAEAeqiMbH10AjXodJIApttiZfL0hhzk86xWyPQ=

OEM Activation 1.0 Data-->

N/A

OEM Activation 2.0 Data-->

BIOS valid for OA 2.0: yes

Windows marker version: 0x20000

OEMID and OEMTableID Consistent: yes

BIOS Information:

ACPI Table Name OEMID Value OEMTableID Value

APIC ACRSYS ACRPRDCT

FACP ACRSYS ACRPRDCT

HPET ACRSYS ACRPRDCT

MCFG ACRSYS ACRPRDCT

SSDT PTLTD POWERNOW

SLIC ACRSYS ACRPRDCT

Answer 3

Hi Kamilong,

I appreciate your efforts to resolve the issue.

Refer the suggestion from Darin Smith Wednesday, May 14, 2008 9:32 PM

http://social.microsoft.com/Forums/en-US/d4d4793c-cc3d-471b-80b3-fb3dd003142b/activation-error-0xc004d302

Please post back if you are still experiencing the issue. I will be glad to provide you with additional options available that you can utilize to get this issue resolved.