Answered by:
Windows Activation - Startup Error

Question
-
Ok so I started up my computer yesterday and got some weird Windows activation error'Windows ActiviationAn un-authorized change was made to windows. Windows has discovered a change that will result in limited functionality. Use the link below to fine out how to fix windows'So I rang HP and they took me through a process of starting up into the BIOS and doing a hard drive and memory scan. No error messages came up.I rebooted and Windows started up fine. Now today I get the same message!I ran the windows diagnostic tool;what happened? it was working fine before yesterday! system restore did not fix it.
Diagnostic Report (1.9.0027.0):-----------------------------------------Windows Validation Data-->Validation Status: GenuineValidation Code: 0Cached Online Validation Code: 0x0Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8QWindows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=Windows Product ID: 89578-OEM-7332157-00061Windows Product ID Type: 2Windows License Type: OEM SLPWindows OS version: 6.0.6001.2.00010300.1.0.003ID: {CE162C9E-4F9F-472C-855E-54F59B4E5456}(3)Is Admin: YesTestCab: 0x0LegitcheckControl ActiveX: Registered, 1.9.42.0Signed By: MicrosoftProduct Name: Windows Vista (TM) Home PremiumArchitecture: 0x00000000Build lab: 6001.vistasp1_gdr.101014-0432TTS Error: M:20110509172843874-Validation Diagnostic:Resolution Status: N/AVista WgaER Data-->ThreatID(s): N/A, hr = 0x80070002Version: N/A, hr = 0x80070002Windows XP Notifications Data-->Cached Result: N/A, hr = 0x80070002File Exists: NoVersion: N/A, hr = 0x80070002WgaTray.exe Signed By: N/A, hr = 0x80070002WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->Cached Result: N/A, hr = 0x80070002Version: N/A, hr = 0x80070002OGAExec.exe Signed By: N/A, hr = 0x80070002OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->Office Status: 1022007 Microsoft Office system - 100 GenuineOGA Version: N/A, 0x80070002Signed By: N/A, hr = 0x80070002Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057Browser Data-->Proxy settings: N/AUser Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)Default Browser: C:\Users\Hamish Towgood\AppData\Local\Google\Chrome\Application\chrome.exeDownload signed ActiveX controls: PromptDownload unsigned ActiveX controls: DisabledRun ActiveX controls and plug-ins: AllowedInitialize and script ActiveX controls not marked as safe: DisabledAllow scripting of Internet Explorer Webbrowser control: DisabledActive scripting: AllowedScript ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->Other data-->Office Details: <GenuineResults><MachineData><UGUID>{CE162C9E-4F9F-472C-855E-54F59B4E5456}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-605724214-3760968768-4039312326</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv5 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.09</Version><SMBIOSVersion major="2" minor="4"/><Date>20080723000000.000000+000</Date></BIOS><HWID>C2313507018400F8</HWID><UserLCID>1409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>New Zealand Standard Time(GMT+12:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 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 Data-->C:\Windows\system32\slmgr.vbs(857, 9) (null): 0xC004D401Windows Activation Technologies-->N/AHWID Data-->HWID Hash Current: OgAAAAIAAQABAAEAAgADAAAABAABAAEAeqjI9ODaTjTixXwe1MXy9N6ILeLWm3wV2waW4I5srFZGyg==OEM Activation 1.0 Data-->N/AOEM Activation 2.0 Data-->BIOS valid for OA 2.0: yesWindows marker version: 0x20000OEMID and OEMTableID Consistent: yesBIOS Information:ACPI Table Name OEMID Value OEMTableID ValueAPIC HPQOEM SLIC-MPCFACP HPQOEM SLIC-MPCHPET HPQOEM SLIC-MPCBOOT HPQOEM SLIC-MPCMCFG HPQOEM SLIC-MPCASF! HPQOEM SLIC-MPCSLIC HPQOEM SLIC-MPCSSDT PmRef CpuPmTuesday, May 10, 2011 6:23 AM
Answers
-
"LordCrumb" wrote in message news:020a36b7-7bf1-41bc-a4b5-fb43df747865...
Hi,
Yes I've used Avast since I got the computer a couple of years ago. How would that suddenly cause problems?
Have you just updated to v6?There's an a couple of errors in your report....TTS Error: M:20110509172843874-andLicensing Data-->
C:\Windows\system32\slmgr.vbs(857, 9) (null): 0xC004D401... which seems to be common to people with Vista SP1 or earlier running Avast v6.The TTS error is an In-Memory Mod-Auth Tamper - which means that a system file is being modified in memory after being read from the disk - the timestamp is the latest time at which such tampering was found (9th May 2001, 17:28hrs).The fact that it's an anti-virus that's associated with this problem could mean one of two things...1) Your system is infected with a virus that the AV has been unable to seeor2) The anti-virus itself is causing the problem.Since so far I've seen no incidences where another AV is involved, the chances are that the problem lies with Avast. Avast has had a similar problem in the past, as well (one would have hoped that they'd have learned from that experience!).Uninstalling Avast seems to cure the problem - I'm currently working with another poster to try and find the exact cause, but these forums aren't the best way to do such things, so I don't hold out too much hope unless Avast issue an update - but reinstalling seems to bring it back again.I would suggest that you try the Avast forums, and see if they are any help....(feel free to point them at this forum to see some of the havoc caused<eg>)...or simply uninstall Avast, and install an alternative AV.Either way, I would recommend updating to Vista SP2 as a matter of course (even if not urgency) before doing anything else.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Tuesday, May 17, 2011 7:23 PM
Tuesday, May 10, 2011 9:53 AMModerator -
I've updated to Service Pack 2, and changed Anti-Virus programs, and it appears to be working correctly now. Thank you for your advice, i really appreciate it.
- Marked as answer by Darin Smith MS Tuesday, May 17, 2011 7:23 PM
Wednesday, May 11, 2011 7:26 AM
All replies
-
"LordCrumb" wrote in message news:1b8f0701-94ce-4e63-9eb4-eda2fd73f336...Ok so I started up my computer yesterday and got some weird Windows activation error'Windows ActiviationAn un-authorized change was made to windows. Windows has discovered a change that will result in limited functionality. Use the link below to fine out how to fix windows'So I rang HP and they took me through a process of starting up into the BIOS and doing a hard drive and memory scan. No error messages came up.I rebooted and Windows started up fine. Now today I get the same message!I ran the windows diagnostic tool;what happened? it was working fine before yesterday! system restore did not fix it.
Diagnostic Report (1.9.0027.0):-----------------------------------------Windows Validation Data-->Validation Status: GenuineValidation Code: 0Cached Online Validation Code: 0x0Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8QWindows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=Windows Product ID: 89578-OEM-7332157-00061Windows Product ID Type: 2Windows License Type: OEM SLPWindows OS version: 6.0.6001.2.00010300.1.0.003ID: {CE162C9E-4F9F-472C-855E-54F59B4E5456}(3)Is Admin: YesTestCab: 0x0LegitcheckControl ActiveX: Registered, 1.9.42.0Signed By: MicrosoftProduct Name: Windows Vista (TM) Home PremiumArchitecture: 0x00000000Build lab: 6001.vistasp1_gdr.101014-0432TTS Error: M:20110509172843874-
If so, then that is probably the source of your problem - I would recommend uninstalling it, updating Windows to Service Pack 2, and then reinstalling Avast. This may fix the problem.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothTuesday, May 10, 2011 7:32 AMModerator -
Hi,
Yes I've used Avast since I got the computer a couple of years ago. How would that suddenly cause problems?
Tuesday, May 10, 2011 9:28 AM -
"LordCrumb" wrote in message news:020a36b7-7bf1-41bc-a4b5-fb43df747865...
Hi,
Yes I've used Avast since I got the computer a couple of years ago. How would that suddenly cause problems?
Have you just updated to v6?There's an a couple of errors in your report....TTS Error: M:20110509172843874-andLicensing Data-->
C:\Windows\system32\slmgr.vbs(857, 9) (null): 0xC004D401... which seems to be common to people with Vista SP1 or earlier running Avast v6.The TTS error is an In-Memory Mod-Auth Tamper - which means that a system file is being modified in memory after being read from the disk - the timestamp is the latest time at which such tampering was found (9th May 2001, 17:28hrs).The fact that it's an anti-virus that's associated with this problem could mean one of two things...1) Your system is infected with a virus that the AV has been unable to seeor2) The anti-virus itself is causing the problem.Since so far I've seen no incidences where another AV is involved, the chances are that the problem lies with Avast. Avast has had a similar problem in the past, as well (one would have hoped that they'd have learned from that experience!).Uninstalling Avast seems to cure the problem - I'm currently working with another poster to try and find the exact cause, but these forums aren't the best way to do such things, so I don't hold out too much hope unless Avast issue an update - but reinstalling seems to bring it back again.I would suggest that you try the Avast forums, and see if they are any help....(feel free to point them at this forum to see some of the havoc caused<eg>)...or simply uninstall Avast, and install an alternative AV.Either way, I would recommend updating to Vista SP2 as a matter of course (even if not urgency) before doing anything else.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Tuesday, May 17, 2011 7:23 PM
Tuesday, May 10, 2011 9:53 AMModerator -
I've updated to Service Pack 2, and changed Anti-Virus programs, and it appears to be working correctly now. Thank you for your advice, i really appreciate it.
- Marked as answer by Darin Smith MS Tuesday, May 17, 2011 7:23 PM
Wednesday, May 11, 2011 7:26 AM -
"LordCrumb" wrote in message news:d12a11ac-fa9b-4462-a7e3-52d59c1c35f2...I've updated to Service Pack 2, and changed Anti-Virus programs, and it appears to be working correctly now. Thank you for your advice, i really appreciate it.
Please post another MGADiag report so we can check
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothWednesday, May 11, 2011 7:33 AMModerator -
Diagnostic Report (1.9.0027.0):-----------------------------------------Windows Validation Data-->Validation Status: GenuineValidation Code: 0Cached Online Validation Code: 0x0Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8QWindows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=Windows Product ID: 89578-OEM-7332157-00061Windows Product ID Type: 2Windows License Type: OEM SLPWindows OS version: 6.0.6002.2.00010300.2.0.003ID: {CE162C9E-4F9F-472C-855E-54F59B4E5456}(3)Is Admin: YesTestCab: 0x0LegitcheckControl ActiveX: Registered, 1.9.42.0Signed By: MicrosoftProduct Name: Windows Vista (TM) Home PremiumArchitecture: 0x00000000Build lab: 6002.vistasp2_gdr.101014-0432TTS Error: M:20110510144608841-Validation Diagnostic:Resolution Status: N/AVista WgaER Data-->ThreatID(s): N/A, hr = 0x80070002Version: N/A, hr = 0x80070002Windows XP Notifications Data-->Cached Result: N/A, hr = 0x80070002File Exists: NoVersion: N/A, hr = 0x80070002WgaTray.exe Signed By: N/A, hr = 0x80070002WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->Cached Result: N/A, hr = 0x80070002Version: N/A, hr = 0x80070002OGAExec.exe Signed By: N/A, hr = 0x80070002OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->Office Status: 1022007 Microsoft Office system - 100 GenuineOGA Version: N/A, 0x80070002Signed By: N/A, hr = 0x80070002Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057Browser Data-->Proxy settings: N/AUser Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)Default Browser: C:\Users\Hamish Towgood\AppData\Local\Google\Chrome\Application\chrome.exeDownload signed ActiveX controls: PromptDownload unsigned ActiveX controls: DisabledRun ActiveX controls and plug-ins: AllowedInitialize and script ActiveX controls not marked as safe: DisabledAllow scripting of Internet Explorer Webbrowser control: DisabledActive scripting: AllowedScript ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->Other data-->Office Details: <GenuineResults><MachineData><UGUID>{CE162C9E-4F9F-472C-855E-54F59B4E5456}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-605724214-3760968768-4039312326</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv5 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.09</Version><SMBIOSVersion major="2" minor="4"/><Date>20080723000000.000000+000</Date></BIOS><HWID>C2313507018400F8</HWID><UserLCID>1409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>New Zealand Standard Time(GMT+12:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 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Licensing Data-->Software licensing service version: 6.0.6002.18005Name: Windows(TM) Vista, HomePremium editionDescription: Windows Operating System - Vista, OEM_SLP channelActivation ID: bffdc375-bbd5-499d-8ef1-4f37b61c895fApplication ID: 55c92734-d682-4d71-983e-d6ec3f16059fExtended PID: 89578-00146-321-500061-02-5129-6001.0000-0982011Installation ID: 002542963656844112554170427424529015566965602392387640Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475Partial Product Key: WQD8QLicense Status: LicensedWindows Activation Technologies-->N/AHWID Data-->HWID Hash Current: OgAAAAIAAQABAAEAAgADAAAABAABAAEAeqjI9ODaTjTixXwe1MXy9N6ILeLWm3wV2waW4I5srFZGyg==OEM Activation 1.0 Data-->N/AOEM Activation 2.0 Data-->BIOS valid for OA 2.0: yesWindows marker version: 0x20000OEMID and OEMTableID Consistent: yesBIOS Information:ACPI Table Name OEMID Value OEMTableID ValueAPIC HPQOEM SLIC-MPCFACP HPQOEM SLIC-MPCHPET HPQOEM SLIC-MPCBOOT HPQOEM SLIC-MPCMCFG HPQOEM SLIC-MPCASF! HPQOEM SLIC-MPCSLIC HPQOEM SLIC-MPCSSDT PmRef CpuPmWednesday, May 11, 2011 11:13 AM
-
"LordCrumb" wrote in message news:bcb5b764-7194-4e73-aa67-4743f87de6d4...Diagnostic Report (1.9.0027.0):-----------------------------------------Windows Validation Data-->Validation Status: GenuineValidation Code: 0Cached Online Validation Code: 0x0Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8QWindows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=Windows Product ID: 89578-OEM-7332157-00061Windows Product ID Type: 2Windows License Type: OEM SLPWindows OS version: 6.0.6002.2.00010300.2.0.003ID: {CE162C9E-4F9F-472C-855E-54F59B4E5456}(3)Is Admin: YesTestCab: 0x0LegitcheckControl ActiveX: Registered, 1.9.42.0Signed By: MicrosoftProduct Name: Windows Vista (TM) Home PremiumArchitecture: 0x00000000Build lab: 6002.vistasp2_gdr.101014-0432TTS Error: M:20110510144608841-
Hopefully, you uninstalled Avast sometime soon after 14:46 yesterday (10th)? If so, then it looks fine to me.You need also to run the Avast Uninstall Utility, which will remove other bits left behind by the normal uninstall routine.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Thursday, May 12, 2011 6:51 PM
Wednesday, May 11, 2011 11:45 AMModerator