Answered by:
Unauthorized Change
Question
-
I get the unauthorized change message below. Please Help. The only thing I can access is my web browser.....
Diagnostic Report (1.7.0095.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
Online Validation Code: 0x80070426
Cached Validation Code: N/A, hr = 0x80070426
Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
Windows Product ID: 89578-OEM-7332157-00061
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6000.2.00010300.0.0.003
CSVLK Server: N/A
CSVLK PID: N/A
ID: {A9C8193B-0D8E-46C9-A3F1-D809C67B9EE5}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6000.vista_ldr.071023-1545
TTS Error: M:20080420213355556-
Validation Diagnostic:
Resolution Status: N/A
WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: 6.0.6001.18000
WGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGATray.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 114 Blocked VLK 2
Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\dnsapi.dll[6.0.6000.20740]
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{A9C8193B-0D8E-46C9-A3F1-D809C67B9EE5}</UGUID><Version>1.7.0095.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-1805602567-2578435107-2198771218</SID><SYSTEM><Manufacturer>HP-Pavilion</Manufacturer><Model>GN561AA-ABA a6230n</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version> 5.11</Version><SMBIOSVersion major="2" minor="4"/><Date>20070716000000.000000+000</Date></BIOS><HWID>BD303507018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-CPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57562</Pid><PidType>14</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>22BF50FAA15BA9A</Val><Hash>bJYJSniggwZiHnrppxb72yGR/HQ=</Hash><Pid>81602-333-2999391-68698</Pid><PidType>10</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: U1BMRwEAAAAAAQAABAAAAHkGAAAAAAAAYWECANOQO522sL8Ec6HIAdArSr9MLECc5R83cvYPeMyuFcqqL8hPmUnN3xbGxvJhjB1s0buFY9yTqHoCbUV4PvmA2FF124VnPMn56Nv0G9EjRP4IlZ4ugOEb5ZNFDy3lGD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2IlE7oPk/SPeaYoTWCOSbwhb0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMys80hrzoE9Y+DrEKxOAMqHY5Y5ee+RyYXFOWjTTl77D5gNhRdduFZzzJ+ejb9BvRRF1sMddSXZKlf5gI94dY3hg/Ne0vArtR1JRjR1RQS05dAaUbA+g8LcegJ8cxFNiJRO6D5P0j3mmKE1gjkm8IW9JzGrd/PyI/Fr8JTdC0e9OifwHVD+C98Itpvxov/asjO1HJpikHVzmDbKnLuATS2zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zFdoTb1d3QOe8cSRMJzKPRwc1prHrVG5sNWwrBTIrvZc+YDYUXXbhWc8yfno2/Qb0Vhu+JXC5pFL25ba1wyNXygYPzXtLwK7UdSUY0dUUEtOXQGlGwPoPC3HoCfHMRTYiUTug+T9I95pihNYI5JvCFvScxq3fz8iPxa/CU3QtHvTon8B1Q/gvfCLab8aL/2rIztRyaYpB1c5g2ypy7gE0tszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMwvPc6MDwNKxWmRisSJDm0xevKO2PvAmTygLQYSkwQI0vmA2FF124VnPMn56Nv0G9GSHcVVv83wdsn3Del+lcWOGD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2IlE7oPk/SPeaYoTWCOSbwhb0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMFm8MdkLmscOQJsmN48Nw1PDbznfD+4fhM4DrnZEzCEj5gNhRdduFZzzJ+ejb9BvR8H4YOeYuHaIfvihzrEwRmhg/Ne0vArtR1JRjR1RQS05dAaUbA+g8LcegJ8cxFNiJRO6D5P0j3mmKE1gjkm8IW9JzGrd/PyI/Fr8JTdC0e9OifwHVD+C98Itpvxov/asjO1HJpikHVzmDbKnLuATS2zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zHncvUZwecRf1ZCls3whAIzAVNKA3UbIMrEO9jkQ72/R+YDYUXXbhWc8yfno2/Qb0TLJFoOT3wK3kOf7fIH2/jUYPzXtLwK7UdSUY0dUUEtOXQGlGwPoPC3HoCfHMRTYiUTug+T9I95pihNYI5JvCFvScxq3fz8iPxa/CU3QtHvTon8B1Q/gvfCLab8aL/2rIztRyaYpB1c5g2ypy7gE0tszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMzL1y1fzdzCZQohtINIETj9ui0Jw8O0h3kpgMtcYuB31PmA2FF124VnPMn56Nv0G9FzruQ+26rQKA8wmSCwElo3GD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2IlE7oPk/SPeaYoTWCOSbwhb0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jM3JRL5Ke1m4Y++0YHg32mb7gLyxgCao9ftl922VxDWEv5gNhRdduFZzzJ+ejb9BvRww0/fWCcAKgBjxe/3ZcwtRg/Ne0vArtR1JRjR1RQS05dAaUbA+g8LcegJ8cxFNiJRO6D5P0j3mmKE1gjkm8IW9JzGrd/PyI/Fr8JTdC0e9OifwHVD+C98Itpvxov/asjO1HJpikHVzmDbKnLuATS2zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zPxpLCvaBDUmzpgFBNpOoipcKMwSbpySrwpyCEAh4aJz+YDYUXXbhWc8yfno2/Qb0RwChmrMgKv/bMtJj8pGMNYYPzXtLwK7UdSUY0dUUEtOXQGlGwPoPC3HoCfHMRTYiUTug+T9I95pihNYI5JvCFvScxq3fz8iPxa/CU3QtHvTon8B1Q/gvfCLab8aL/2rIztRyaYpB1c5g2ypy7gE0tszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMyFmi04oPkPIJwKKkftbTT1kYIqEnBBe0hYpJoXCXVBH/mA2FF124VnPMn56Nv0G9HTLD0ccd30ATsPyWsw92v3GD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2IlE7oPk/SPeaYoTWCOSbwhb0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jM+1x76KJkwLV9r4N7XyjLKXcwnzZZa53ofMEeNMjb0CH5gNhRdduFZzzJ+ejb9BvRs2ITL0yPavlhbtvNs7OXiBg/Ne0vArtR1JRjR1RQS05dAaUbA+g8LcegJ8cxFNiJRO6D5P0j3mmKE1gjkm8IW9JzGrd/PyI/Fr8JTdC0e9OifwHVD+C98Itpvxov/asjO1HJpikHVzmDbKnLuATS2zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zJAfPdT5HPZWS2RTeYm6YN6RwxsqL6lBSQuTAGleu5Li+YDYUXXbhWc8yfno2/Qb0fHG74tDEV2ZgkA2CW5tNNcYPzXtLwK7UdSUY0dUUEtOXQGlGwPoPC3HoCfHMRTYiUTug+T9I95pihNYI5JvCFvScxq3fz8iPxa/CU3QtHvTon8B1Q/gvfCLab8aL/2rIztRyaYpB1c5g2ypy7gE0tszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMxf8cqX/rn4UueQiwWADpsAUjNlinECRbFWWzzlSh5Q9PmA2FF124VnPMn56Nv0G9EjRP4IlZ4ugOEb5ZNFDy3lGD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2IlE7oPk/SPeaYoTWCOSbwhb0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMVQ/aEk0P8a8yI0mkLH9H5sFTFYK4LA36htJ8bYXCFm/5gNhRdduFZzzJ+ejb9BvRdv2XxwycrKn/oNNUJTNZPBg/Ne0vArtR1JRjR1RQS05dAaUbA+g8LcegJ8cxFNiJRO6D5P0j3mmKE1gjkm8IW9JzGrd/PyI/Fr8JTdC0e9OifwHVD+C98Itpvxov/asjO1HJpikHVzmDbKnLuATS2zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMMonday, April 21, 2008 2:06 AM
Answers
-
Hello gablesguy,
The core to your particular issue, centers on the line in your Diagnostic Report that reads:
File Scan Data-->
File Mismatch: C:\Windows\system32\dnsapi.dll[6.0.6000.16615]
This line means that the critical system file dnsapi.dll either
a) Has been tampered/modified/become corrupt to the point that its Signature Hash no longer matches the Signature Hash listed in Vista's System Catalog.
Or
b) The dnsapi.dll file has recently been updated but the file's Signature Hash was not updated, in Vista's System Catalog to reflect the updated dnsapi.dll file's new Signature Hash.
Vista compares a Critical System file's Signature Hash with the Signature Hash listed in its System Catalog to determine if that Critical System file has been tampered with.
In the case of the Critical System file dnsapi.dll, on April 8th 2008, Windows Update released Update KB945553. One of the things that this update did was to update Critical System file dnsapi.dll. We believe that, in some rare cases, after the Update updated dnsapi.dll, it failed to update Vista's System Catalog with the file's new Signature Hash. When this happens Vista compares the two Signature Hashes and when they don't match, Vista's anti-piracy system thinks the critical system file has been tampered with and flags Vista as Non-Genuine.
To resolve your issue, we need to get the file's Signature Hash to match what is listed in Vista System Catalog. I can provide a couple of suggestions to do this:
A) Uninstall Update KB945553:
1. Reboot Vista into Safe Mode
2. Go to Control Panel
3. On the left hand side of the Controlee panel window, Click on "Classic View"
4. Double-click "Programs and Features"
5. On the left hand side, under "Tasks" click "View installed updates"
6. Sort the updates by "Installed On" date
7. Find the Updates installed on (or after) April 8th
8. Find the Updated titled "Security Update for Windows Vista (KB945553)"
9. Right-Click on the Update and select "Uninstall"
10. Reboot into normal mode
11. Vista should no longer be in Reduced Functionality mode
12. You can manually reinstall Update KB945553 by going to http://www.microsoft.com/downloads/details.aspx?FamilyID=8203d303-c855-4579-9bbf-b06ddf5c1b87&DisplayLang=en click the "Download" button, then click "open" (if any other windows pop-up, click the 'Allow" or Continue" button.
13. When the update is complete, reboot the computer. When the computer reboots, you should see a screen that says something like "Configuring Update..." Do not turn off or reboot your computer until Vista has completed configuring the update.
B) Repair Windows using System Restore:
1. Reboot Vista into Safe Mode
2. Go to Control Panel
3. On the left hand side of the Controlee panel window, Click on "Classic View"
4. Double-click "Backup and Restore Center"
5. On the left hand side of the window, click "Repair Windows using system restore"
i. If the last thing that you installed was Update KB945553, then select the "Recommended Restore"
ii. If you have since installed other software, drivers or updates, then select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date you installed Update KB945553 (would be around April 8th or after).
6. Click the "Next" button.
7. Reboot back into Normal mode
8. Vista should no longer be in Reduced Functionality mode
9. You can manually reinstall Update KB945553 by going to http://www.microsoft.com/downloads/details.aspx?FamilyID=8203d303-c855-4579-9bbf-b06ddf5c1b87&DisplayLang=en click the "Download" button, then click "open" (if any other windows pop-up, click the 'Allow" or Continue" button.
10. When the update is complete, reboot the computer. When the computer reboots, you should see a screen that says something like "Configuring Update..." Do not turn off or reboot your computer until Vista has completed configuring the update.
If, after you reinstall the update, you re-experience the issue again, please go to the Windows Update Solution Center at http://support.microsoft.com/ph/6527#tab0 or create a (no cost) Windows Update support request at http://support.microsoft.com/oas/default.aspx?gprid=6527
Thank you,Darin Smith
WGA Forum Manager
Wednesday, April 23, 2008 11:04 PM
