none
After a sytem restore, received pop-up: an unauthorized change was made to windows error 0xc004d401

    Question

  • I had to replace the hard drive in an HP Pavilion DV9500 and restored the OS using the HP System Restore disc that came with the laptop. I then installed Avast! antivirus. Shortly after that, I began getting pop-ups with the following message: "An unauthorized change was made to Windows ... error 0xc004d401."

    Per article http://social.microsoft.com/Forums/en-US/genuinevista/thread/a3145e58-eaea-43e5-b2db-c15885076c48, I am opening this thread and will then uninstall Avast!, then I'll update Vista to SP2 and re-validate.

    Here is the result of the first MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-VFWRT-JGH7R-R933G
    Windows Product Key Hash: gYrJFhcKVmHMbiVVuoEU7w/jsC0=
    Windows Product ID: 89587-OEM-7332132-00015
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6000.2.00010100.0.0.001
    ID: {469CD9EF-490B-4641-86B4-17C5A2F172C2}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Ultimate
    Architecture: 0x00000009
    Build lab: 6000.vista_gdr.100218-0019
    TTS Error: M:20120109052708672-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office Home and Student 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{469CD9EF-490B-4641-86B4-17C5A2F172C2}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6000.2.00010100.0.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-R933G</PKey><PID>89587-OEM-7332132-00015</PID><PIDType>2</PIDType><SID>S-1-5-21-3383075530-1915676913-2787594687</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv9500 Notebook PC    </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.57     </Version><SMBIOSVersion major="2" minor="4"/><Date>20080521000000.000000+000</Date></BIOS><HWID>4B313507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>6B4C28174EFE5AE</Val><Hash>nCOpg+UXvxB2YiKODx29ingpOlA=</Hash><Pid>81602-OEM-6872732-47549</Pid><PidType>4</PidType></Product></Products><Applications><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(291, 5) (null): 0xC004D401

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: PAAAAAEABgABAAEAAQABAAAABAABAAEAJJRiqBDePF7WdXB6kiQso0aDZNmo+/L0VCZBRKQePh2sViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HP      30CB   
      FACP   HP      30CC   
      HPET   HP      30CB   
      BOOT   HP      30CB   
      MCFG   HP      30CB   
      TMOR   HP      30CC   
      SLIC   HPQOEM  SLIC-MPC
      SSDT   HP      30CB   
      SSDT   HP      30CB   
      SSDT   HP      30CB   
      SSDT   HP      30CB   

     

    Tuesday, January 10, 2012 1:36 AM

Answers

  • In Safe Mode, I used the uninstall tool from the Avast! website (http://www.avast.com/en-us/uninstall-utility) to remove Avast! antivirus. I then updated Windows Vista with Service Packs 1 and 2. Now MGADiag shows the installation of Windows to be genuine. I'll re-install Avast! now and let you know what happens.

    Results of the second MGADiag:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-VFWRT-JGH7R-R933G
    Windows Product Key Hash: gYrJFhcKVmHMbiVVuoEU7w/jsC0=
    Windows Product ID: 89587-OEM-7332132-00015
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010100.2.0.001
    ID: {469CD9EF-490B-4641-86B4-17C5A2F172C2}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Ultimate
    Architecture: 0x00000009
    Build lab: 6002.vistasp2_gdr.100218-0019
    TTS Error: M:20120109052708672-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office Home and Student 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{469CD9EF-490B-4641-86B4-17C5A2F172C2}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010100.2.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-R933G</PKey><PID>89587-OEM-7332132-00015</PID><PIDType>2</PIDType><SID>S-1-5-21-3383075530-1915676913-2787594687</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv9500 Notebook PC    </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.57     </Version><SMBIOSVersion major="2" minor="4"/><Date>20080521000000.000000+000</Date></BIOS><HWID>4B313507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>6B4C28174EFE5AE</Val><Hash>nCOpg+UXvxB2YiKODx29ingpOlA=</Hash><Pid>81602-OEM-6872732-47549</Pid><PidType>4</PidType></Product></Products><Applications><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, Ultimate edition
    Description: Windows Operating System - Vista, OEM_SLP channel
    Activation ID: 5e802570-4657-4e84-bfbc-6a0e531b84af
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89587-00146-321-300015-02-1033-6000.0000-0072012
    Installation ID: 000540379822290160373845897090036556063606636475900061
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: R933G
    License Status: Licensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: PAAAAAEABgABAAEAAQABAAAABAABAAEAJJRiqBDePF7WdXB6kiQso0aDZNmo+/L0VCZBRKQePh2sViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HP      30CB   
      FACP   HP      30CC   
      HPET   HP      30CB   
      BOOT   HP      30CB   
      MCFG   HP      30CB   
      TMOR   HP      30CC   
      SLIC   HPQOEM  SLIC-MPC
      SSDT   HP      30CB   
      SSDT   HP      30CB   
      SSDT   HP      30CB   
      SSDT   HP      30CB   

     

    • Marked as answer by Darin Smith MS Tuesday, January 10, 2012 9:39 PM
    Tuesday, January 10, 2012 5:41 AM

All replies

  • In Safe Mode, I used the uninstall tool from the Avast! website (http://www.avast.com/en-us/uninstall-utility) to remove Avast! antivirus. I then updated Windows Vista with Service Packs 1 and 2. Now MGADiag shows the installation of Windows to be genuine. I'll re-install Avast! now and let you know what happens.

    Results of the second MGADiag:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-VFWRT-JGH7R-R933G
    Windows Product Key Hash: gYrJFhcKVmHMbiVVuoEU7w/jsC0=
    Windows Product ID: 89587-OEM-7332132-00015
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010100.2.0.001
    ID: {469CD9EF-490B-4641-86B4-17C5A2F172C2}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Ultimate
    Architecture: 0x00000009
    Build lab: 6002.vistasp2_gdr.100218-0019
    TTS Error: M:20120109052708672-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office Home and Student 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{469CD9EF-490B-4641-86B4-17C5A2F172C2}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010100.2.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-R933G</PKey><PID>89587-OEM-7332132-00015</PID><PIDType>2</PIDType><SID>S-1-5-21-3383075530-1915676913-2787594687</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv9500 Notebook PC    </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.57     </Version><SMBIOSVersion major="2" minor="4"/><Date>20080521000000.000000+000</Date></BIOS><HWID>4B313507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>6B4C28174EFE5AE</Val><Hash>nCOpg+UXvxB2YiKODx29ingpOlA=</Hash><Pid>81602-OEM-6872732-47549</Pid><PidType>4</PidType></Product></Products><Applications><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, Ultimate edition
    Description: Windows Operating System - Vista, OEM_SLP channel
    Activation ID: 5e802570-4657-4e84-bfbc-6a0e531b84af
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89587-00146-321-300015-02-1033-6000.0000-0072012
    Installation ID: 000540379822290160373845897090036556063606636475900061
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: R933G
    License Status: Licensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: PAAAAAEABgABAAEAAQABAAAABAABAAEAJJRiqBDePF7WdXB6kiQso0aDZNmo+/L0VCZBRKQePh2sViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HP      30CB   
      FACP   HP      30CC   
      HPET   HP      30CB   
      BOOT   HP      30CB   
      MCFG   HP      30CB   
      TMOR   HP      30CC   
      SLIC   HPQOEM  SLIC-MPC
      SSDT   HP      30CB   
      SSDT   HP      30CB   
      SSDT   HP      30CB   
      SSDT   HP      30CB   

     

    • Marked as answer by Darin Smith MS Tuesday, January 10, 2012 9:39 PM
    Tuesday, January 10, 2012 5:41 AM
  • "tjeweler" wrote in message news:a3617b3f-16a0-4576-a6e3-c1a0cfeb78d7...

    In Safe Mode, I used the uninstall tool from the Avast! website (http://www.avast.com/en-us/uninstall-utility) to remove Avast! antivirus. I then updated Windows Vista with Service Packs 1 and 2. Now MGADiag shows the installation of Windows to be genuine. I'll re-install Avast! now and let you know what happens.

    Results of the second MGADiag:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-VFWRT-JGH7R-R933G
    Windows Product Key Hash: gYrJFhcKVmHMbiVVuoEU7w/jsC0=
    Windows Product ID: 89587-OEM-7332132-00015
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010100.2.0.001
    ID: {469CD9EF-490B-4641-86B4-17C5A2F172C2}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Ultimate
    Architecture: 0x00000009
    Build lab: 6002.vistasp2_gdr.100218-0019
    TTS Error: M:20120109052708672-

     

    Got it in one! – well done.
    I would have pointed you at my standard response - 0xC004D401 errors in MGADiag - and System File Mismatch errors
    which advises pretty much exactly what you did.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, January 10, 2012 11:11 AM
    Moderator
  • The re-installation of Avast! Antivirus went smoothly after Vista was updated with SP2. No more error messages!
    Thursday, January 12, 2012 3:22 AM
  • "tjeweler" wrote in message news:2a2fcef9-d2f7-4d1e-a02f-c7660191bb0a...
    The re-installation of Avast! Antivirus went smoothly after Vista was updated with SP2. No more error messages!
     
     
    Great – please post a new MGADiag report so that we can check.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, January 12, 2012 7:32 AM
    Moderator