Answered by:
An unauthorized change was made to Windows

Question
-
(I am reposting this cos i have more details...)
I know a lot of people have this error, but mine is very very special. One day I happen to have this 'Vista Build 6002' and said my computer was not genuine. My background was black always. I searched for solutions but they didn't work. For example, the CMD method (http://social.microsoft.com/Forums/en-US/genuinevista/thread/00bf537e-b792-4fa2-b08c-7c8c532827aa), when it comes to the 'rename tokens.dat...' my CMD said the tokens.dat cannot be found or there's a duplicate. The phone method didn't worked at all, there is no 'select your country' or not even a phone activation. Rebooted more than twice and my problem is still there. PLEASE HELP! :'(
Here's my MGADiag report.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Online Validation Code: 0xc004c4a8
Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
Windows Product ID: 89572-OEM-7332166-00021
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6002.2.00010300.2.0.002
ID: {C8B15D92-F96F-440F-A78B-3C22F8EF490B}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows Vista (TM) Home Basic
Architecture: 0x00000000
Build lab: 6002.vistasp2_gdr.110617-0336
TTS Error: T:20110818135812053-M:20110828151831297-
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: 6.0.6001.18000
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C8B15D92-F96F-440F-A78B-3C22F8EF490B}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-1530720570-2451816494-325561362</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Presario C500 (GC200PA#UUF) </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.15</Version><SMBIOSVersion major="2" minor="4"/><Date>20070309000000.000000+000</Date></BIOS><HWID>7A313507018400FE</HWID><UserLCID>4809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>4B11C053BA76732</Val><Hash>LZONb4e8F8eQrx51opYuraAI6aA=</Hash><Pid>81602-921-8952121-68979</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 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
Licensing Data-->
Software licensing service version: 6.0.6002.18005
Windows Activation Technologies-->
N/A
HWID Data-->
HWID Hash Current: PAAAAAIABAABAAIAAgABAAAAAwABAAEA+l6yp87iRbHAQ8x7SOTiFYiAcHGysI3v8vQqbBLIxJ2sVvRI
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20000
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC HP NISSAN
FACP HP NISSAN
HPET HP NISSAN
BOOT PTLTD $SBFTBL$
MCFG HP NISSAN
SLIC HPQOEM SLIC-MPC
APIC HP NISSAN
SSDT SataRe SataAhci
SSDT SataRe SataAhci
Sunday, August 28, 2011 9:13 AM
Answers
-
"TechKid" wrote in message news:2a71a277-32ad-43a1-885d-e39a148fc184...
(I am reposting this cos i have more details...)
I know a lot of people have this error, but mine is very very special. One day I happen to have this 'Vista Build 6002' and said my computer was not genuine. My background was black always. I searched for solutions but they didn't work. For example, the CMD method (http://social.microsoft.com/Forums/en-US/genuinevista/thread/00bf537e-b792-4fa2-b08c-7c8c532827aa), when it comes to the 'rename tokens.dat...' my CMD said the tokens.dat cannot be found or there's a duplicate. The phone method didn't worked at all, there is no 'select your country' or not even a phone activation. Rebooted more than twice and my problem is still there. PLEASE HELP! :'(
Here's my MGADiag report.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Online Validation Code: 0xc004c4a8
Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
Windows Product ID: 89572-OEM-7332166-00021
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6002.2.00010300.2.0.002
ID: {C8B15D92-F96F-440F-A78B-3C22F8EF490B}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows Vista (TM) Home Basic
Architecture: 0x00000000
Build lab: 6002.vistasp2_gdr.110617-0336
TTS Error: T:20110818135812053-M:20110828151831297-
You have a Trusted Store Tamper, and an In-Memory Mod-Auth TamperIt’s likely the result of malware infestation, or a recent software update/install (on about the 16th-18th August)You need to update your Anti-Virus and run a full scan, then download, install, update and run Malwarebytes Anti-Malware (www.malwarebytes.org) free version – do NOT enable the real-time protection – and run a Full System scan in your main user account, and a Quick scan in all other accounts.Then post back with a new MGADiag report, and details of the number and type of infections found.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Wednesday, August 31, 2011 9:06 PM
- Marked as answer by Darin Smith MS Thursday, September 1, 2011 9:05 PM
Sunday, August 28, 2011 10:55 AMModerator