Micro AV + Windows Genuine Validation Failure Resolution

I can't post on the thread by cwchute or TimW to let them know what I've found out, because I've not made 50 posts. I hope that this gets to them + is useful.

I recently got a version of the Micro AV virus as described in:

http://forums.majorgeeks.com/showthread.php?p=1217214

I lost access to the control panel through the start menu, access to my %systemroot% drive, got all kinds of rubbish in system32+the registry+program files, had to re-activate windows (which seemed to succeed) and was unable to get through the 'Windows genuine validation'.

I used the 'Read and Run Me First' and 'Windows XP cleaning procedures' given on this site to help me remove the Trojan etc + was able to resolve all issues other than the problem with validation.
Thanks so much for making all that help available here!!

I eventually worked out that the registry entry for that the ProductID was blank (hence the validation failure).
This can be viewed in system properties on the general tab
I re-added it using regedit to go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

and double-clicking on ProductID (interestingly it'd left the DigitalProductID intact, which might be why the re-authorization went through ok, but the validation didn't.... I don't honestly know).

I'm lucky enough to have kept the boxes for my version of XP Pro, so had no trouble entering my product key again. If you don't have that you can use:
-----------------------------------------------------------------------------------------
Keyfinder 2.01
http://magicaljellybean.com/keyfinder/
-----------------------------------------------------------------------------------------
or if that fails try XPKeyDecrypt
http://www.dagondesign.com/files/XPKeyDecrypt.exe

this page describes which digits you need to enter from the DigitalProductID to get the ProductID http://www.dagondesign.com/articles/windows-xp-product-key-recovery/comment-page-11/
-----------------------------------------------------------------------------------------
Once I'd entered the information I was able to validate my copy of XP (hooo-f'ing-raaaaaaaaaaaaaaaaaaaaah!!!).

I hope this helps + apologies if I've violated forum rules... I just couldn't think of another way of letting cwchute or TimW know what had worked for me.

 

Just to be a bit clearer you enter the product key (when you have got it from the box or by using the steps mentioned in my original post) by using regedit to go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

double-clicking on "ProductID"

typing/pasting the product key into the "Value Data" field

closing the regedit

 

I too was a victim of MicroAV and glad I found your post regarding the blank product ID! However if i'm not mistaken you must first convert the Product Key to the Product ID before adding it back to the registry(?). The easiest way i found to get what you need is via aida32 or Belarc Advisor (both free).
In Belarc (http://www.belarc.com/End-User_Products.html) under Software Licenses look for 'Microsoft - Internet Explorer' and to the right you will see the Product ID followed by the Product Key. You can copy and paste this Product ID into the registry, since the MSIE Product ID will be the same as the WinXP Product ID on any given PC.

Cheers