We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

This computer is not running genuine windows.

13»

Comments

  • Flyboy152 wrote: »
    It will continue to fail to install, because it doesn't recognise your OS as being genuine. Does it give a build code of 6002.

    Nope no build code!
    Flyboy152 wrote: »
    Have you re-installed anything?

    Have you had a repair done recently?

    Nope nothing has been changed at all!
    LubiLou wrote: »
    I am having exactly the same problem with my laptop. It started this morning. I bought mine from Currys dec 2009 and software wise it has been fine until today. I can't read my product key from the bottom as its been worn away so I think it will be a trip to currys :( Good luck fixing yours and If I find a way I will let you know.

    Good luck let me know how you get on :)
  • banger9365
    banger9365 Posts: 1,702 Forumite
    Part of the Furniture Combo Breaker
    i thourght MS sorted this out in vista ,
    used to happen alot with top end pc's for gaming ,when they had two graphic cards ,
    one card was asleep and wake up to play games and vista thourght it was different pc and give you the This computer is not running genuine windows,
    y
    eah right,it was a right pain having to ring MS up to reactivate windows

    it would just ring MS up to reactivate it
    there or their,one day i might us the right one ,until then tuff

  • just a thought check this malware report please . sounds familiar to me good luck

    Summary





    A new piece of very nasty malware has been recently discovered on spyware help forums, first The file name is wgavn.exe and it creates a service named "Windows Genuine Advantage Validation Notification", as seen in this line in the HijackThis log.

    O23 - Service: Windows Genuine Advantage Validation Notification (wgavn) - Unknown owner - C:\WINDOWS\system32\wgavn.exe

    Thanks to security MVPs at the,ahuma forum I was able to get a sample today — this is one nasty little piece of malware. I tested it on a virtual machine running XP Pro, totally unpatched. On execution, wgavn.exe creates a folder, C:\Windows\etc\, that contains a file named services.exe. Wgavn.exe copies itself to the \System32\ folder as shown in the HijackThis line above.
    On my virtual machine, it disabled the following: WinPatrol, an anti-spyware program, a third party firewall, VMware Tools, VMware User Process, and VPCUserServices by changing the values of the Run keys in HKEY_LOCAL_MACHINE. Another researcher reported it disabled the Windows firewall and System Restore.


    Wgavn.exe immediately attempted to contact several different IP addresses. The ISP is being notified in an attempt to investigate these sites and IPs. At this time, it’s unknown how the two users who posted the HijackThis logs got infected with this. The sample has been submitted to anti-malware vendors but as of earlier today was poorly detected. Kaspersky is now detecting it as Backdoor.Win32.IRCBot.st, and another AV at virus total detected it as Backdoor.Win32.IRCBot.BV.

    Update June 30: infoworld now has this story on wgavn.exe and says Sohpos is calling it an AOL Instant Messaging worm and variant of the Cuebot family. Sophos named it W32.Cuebot-K.
    Cuebot-K can disable other software, shut off the Windows firewall, download new malicious programs, perform basic DDOS (distributed denial of service) attacks, scan local files and spawn a command prompt, Sophos said.
  • fishjason72
    fishjason72 Posts: 2 Newbie
    edited 31 January 2011 at 8:43AM
    id start with searching the comp for wgavn.exe

    usually located

    C: Windows System32 for xp Vista and windows 7.


  • davb
    davb Posts: 1,293 Forumite
    Part of the Furniture Combo Breaker
    It may be worth a call to the Microsoft activation helpline (the number should display on your PC), as after all you are not trying scam them, it's you that's being messed about. You have recently purchased a new branded PC from a large UK retailer with the OS pre-installed, you have a valid COA sticker on the PC (which isn't used anywhere else), you haven't modified anything to do with the OS activation, and you have not added/removed/replaced any hardware components, or had it repaired.
    Worst case, they tell you to speak to Currys, but they just may get you up and running.
  • NiVZ
    NiVZ Posts: 174 Forumite
    Hello,

    I had this happen to me once. Culprit turned out to be Windows Security Essentials. Are you using this by any chance?

    I managed to fix it by downloading and installing the latest version from http://www.microsoft.com/security_essentials

    Been running fine ever since.

    NiVZ
  • gaming_guy
    gaming_guy Posts: 6,128 Forumite
    1,000 Posts Combo Breaker
    edited 1 June 2012 at 2:31PM
    ....................
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351.7K Banking & Borrowing
  • 253.4K Reduce Debt & Boost Income
  • 454K Spending & Discounts
  • 244.7K Work, Benefits & Business
  • 600.1K Mortgages, Homes & Bills
  • 177.3K Life & Family
  • 258.4K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.