Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - EdwardNigma

Pages: [1]
1
Breaking a WGA hack moves them further from a working windows. If it had left that host entry alone I wouldn't have had to spend the extra time fixing a new problem. I'm not saying to detect and police the change, but to detect and leave the entry there to prevent problems. Just a suggestion.

2
Used Microsoft windows key changer and used the key that was right on top of the machine and authenticated with no problem, I have no idea why it wouldn't be using a genuine key to begin with.

I did try and copy the host file to my flash drive but i deleted all the files on it when ti got infected by the machine in question. I did see one line in the host file for Microsoft that redirected to the local machine.

Maybe detect those changes and have your program keep them in the host file when it's done. Even if there was a popup warning me that it would break WGA work around I'd still have proceeded. :P Didn't know it would have trouble.

Thanks again for the information and also extremely happy it at least backed up the host file, restoring it was simple though not needed once I reactivated with the key on the case.

3
I will thanks for the quick reply and the information. They have a valid Win key on the machine and they bought the system legitimately too so I don't see any reason why it would be running that but I'll check and get back to you.

4
I'll take a look to see if it was changed and get back to you. I can't say for sure that it wasn't using something to stop WGA but I'm almost certain it wasn't. Will update on Monday.

5
Created restore point and backed up registry. After restoring both still showing not genuine. Ran multiple fixes to repair services damaged by the recycling variant of zero access which MBAM removed. Firewall, security center, automatic updates, file associations, and a few others. Had MSSE on machine so pretty sure copy was validated before running the tool. Again it's got a valid key/sticker so no reason it should have been using a WGZ killer that may have broken in the repair process. This is a friends machine and i won't have a change to gt back to it until Monday morning. Any recommendations greatly appreciated.

Pages: [1]