ITsVISTA
Information that makes life easier when it comes to installing, managing, and using Windows Vista.
Start About FAQ Blogroll Shop

ITsVISTA Update: KB929391, the Vista Frankenbuild Killer?

Apparently Microsoft has released an update to combat the recent activation hack referred to as Frankenbuild. The update, released the week of Dec. 12, will have the Windows Update client do a genuine validation check on systems that it detects as being tampered with. None of the mainstream articles are yet listing the Knowledge Base article number, but one forum poster has listed it as “Windows Vista Validation Update” (KB929391). A search for this currently comes back negative, so it’s uncertain if this is the actual number yet. Anyone have more info on this Vista Update?

Get notified of new posts for FREE via RSS or E-mail

Subscribe to ITsVISTA!

Comments

  • jpfieber

    Dec 15, 2006 at 11:48 am

    Digg has an article that also lists this KB number (http://digg.com/software/Microsoft_releases_first_Validation_patch_for_Vista), but I can’t find the post in the forum that the article is from.

  • Chris

    Dec 15, 2006 at 2:16 pm

    Haha, I was the one who dug that article, it was my first digg, so I didn’t exactly know what I was doing and set it to my homepage. lol!
    Then I couldn’t edit the digg to correct my typos.
    xD

  • jpfieber

    Dec 15, 2006 at 2:29 pm

    Oh well, I had a major brain fart as well today. It’s Friday, we all get a free pass…

  • Chris

    Dec 15, 2006 at 5:22 pm

    I posted a topic on the forum concerning Vista. I’ll keep it updated with sources concerning Vista.
    However the forum is offline until tomorrow as an RPG “ADR” mod is being installed.

  • Chris

    Dec 15, 2006 at 5:37 pm

    Well, I wasn’t paying attention and installed the validaton update. Oops.

    Reversing this is a real pain in the tail. If you have a recent Complete PC Backup, by all means use it. Boot from the Vista DVD, restore the backup and catch up from there. This time, uncheck and hide the damn update.

    If you’re stuck without an image, well, here’s what you have to do.

    You’ll need:
    1) Your Vista DVD
    2) the RC1 tokens.dat
    3) a CPP product key

    but that is exactly what got us in this mess, so you probably have them.

    - Backup everything important before you do this. Seriously.

    - Reboot into Safe Mode. Make sure “Show Hidden Files/Show protected system files” is checked in Folder Options. Duh.

    - Zap the WPA encrypted store. Delete the following (hidden) files:
    “C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0″
    “C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0″

    -Uninstall the WGA update. Run the following command:
    regsvr32 /u c:\windows\system32\LegitCheckControl.dll

    Reset Software Licensing tokens:
    - Copy the RC1 tokens.dat to “C:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\”

    Remove the WPA data from the registry. You can’t do this to a running install. So…
    - Restart and boot from the Vista DVD. Choose “Repair my computer” and choose your Vista install. Select “Command Prompt”
    - Run regedit from the cmd prompt
    - Select HKEY_LOCAL_MACHINE and then select File -> Load Hive
    - Navigate to [your system disk]:\windows\system32\config and choose the SYSTEM hive. Give it key name of “temp”
    - Delete HKEY_LOCAL_MACHINE\temp\WPA\ to remove it and the subkeys under it.
    - Select HKEY_LOCAL_MACHINE\temp\ and then select File -> unload hive
    - Close regedit, close the prompt, and restart.

    Reactivate:
    - Boot normally.
    - When you log on you will in RFM and told “Your copy of windows is not genuine” Whatever. Rolling Eyes
    - Run slui.exe, enter your CPP product key and fire away. It should activate as genuine! Log off and back on to get Aero back.

    Run windows update, uncheck that piece of crap, and hide it. RIGHT NOW.

  • jpfieber

    Dec 15, 2006 at 5:54 pm

    We don’t condone piracy of course, but if nothing else this points out if/how Microsoft’s new strategy is working, thanks for sharing!

  • jpfieber

    Dec 16, 2006 at 10:40 am

    Here’s the first Microsoft page I’ve seen about this. It doesn’t say much, but it’s there:
    http://support.microsoft.com/kb/929391

  • alfa

    Dec 16, 2006 at 5:31 pm

    Chris,
    Can i use a RC1 key instead of CPP product key?

  • jpfieber

    Dec 16, 2006 at 6:02 pm

    Legally I’m sure that wouldn’t get you anywhere, but I think I’ve seen talk of hacks that make use of an RC key.

  • Chris

    Dec 17, 2006 at 4:24 am

    I have no idea, have the original topic that I’m quoting here:
    http://keznews.com/forum/viewtopic.php?t=231

  • Chris

    Dec 17, 2006 at 4:28 am

    http://keznews.com/forum/viewforum.php?f=2
    WRONG LINK!!!

  • dan

    Dec 17, 2006 at 11:06 am

    works like a charm.. thanks, chris

  • Fuj

    Dec 18, 2006 at 4:25 am

    Hi,
    I did as you told but I can’t get the product key window.
    the SL UI and Software Licening services are not running and when I try to Start them manually it tells me error code 0xc004d103 and the only option I have is to validate through the M$ website.

    what can I do now?
    10x

  • Fuj

    Dec 18, 2006 at 6:08 am

    **Update**
    Now I cannot log in to Vista..it tells me validate online or close. close means back into logon screen…
    what can I do now..I just want the desktop back. w/o validation.

    10x

  • Expect an Update to Stop Vista 'Timer/2099 Crack' Soon | ITsVISTA

    Jan 2, 2007 at 8:01 pm

    [...] Just a couple weeks ago a 'fix' to stop the Frankenbuild activation hack was released. A few hours ago 'alexkoc' on the Windows Genuine Advantage blog acknowledged that their is a new Vista activation hack in the wild. It won't be long until another update is released, and a new round of messages on how to uninstall it floods the web. [...]

  • Microsoft Says it Won't Stop Vista Upgrade Thieves | ITsVISTA

    Feb 9, 2007 at 3:44 pm

    [...] Microsoft was quick to jump on the 'Frankenbuild' method of hacking Vista, but they don't seem so interested in this loophole. When asked by vnunet.com, a Microsoft spokesman said: "People without a licensed copy of XP that use this workaround are violating the terms of use agreed to when they purchased the upgrade version of Windows Vista, as such, we believe only a very small percentage of people will take the time to implement this workaround, and we encourage all customers to follow our official guidelines for upgrading to Windows Vista." [...]

  • Chandrashekhar

    Jan 5, 2010 at 3:40 am

    Thanks for sharing……..i like your blog keep up to date

    Fix acess denied error in vista.
    http://freecomputercourses.blogspot.com/2010/01/how-to-fix-acess-denied-error-in.html

Leave a Comment