none
An unauthorized change was made to Windows

    Question

  • (I am reposting this cos i have more details...)

    I know a lot of people have this error, but mine is very very special. One day I happen to have this 'Vista Build 6002' and said my computer was not genuine. My background was black always. I searched for solutions but they didn't work. For example, the CMD method (http://social.microsoft.com/Forums/en-US/genuinevista/thread/00bf537e-b792-4fa2-b08c-7c8c532827aa), when it comes to the 'rename tokens.dat...' my CMD said the tokens.dat cannot be found or there's a duplicate. The phone method didn't worked at all, there is no 'select your country' or not even a phone activation. Rebooted more than twice and my problem is still there. PLEASE HELP! :'( 

    Here's my MGADiag report.

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Status: Invalid License

    Validation Code: 50

    Cached Online Validation Code: 0xc004c4a8

    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3

    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=

    Windows Product ID: 89572-OEM-7332166-00021

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.0.6002.2.00010300.2.0.002

    ID: {C8B15D92-F96F-440F-A78B-3C22F8EF490B}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: Registered, 1.9.42.0

    Signed By: Microsoft

    Product Name: Windows Vista (TM) Home Basic

    Architecture: 0x00000000

    Build lab: 6002.vistasp2_gdr.110617-0336

    TTS Error: T:20110818135812053-M:20110828151831297-

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: 6.0.6001.18000

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Home and Student 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{C8B15D92-F96F-440F-A78B-3C22F8EF490B}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-1530720570-2451816494-325561362</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Presario C500 (GC200PA#UUF)       </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.15</Version><SMBIOSVersion major="2" minor="4"/><Date>20070309000000.000000+000</Date></BIOS><HWID>7A313507018400FE</HWID><UserLCID>4809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>4B11C053BA76732</Val><Hash>LZONb4e8F8eQrx51opYuraAI6aA=</Hash><Pid>81602-921-8952121-68979</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

     

    Spsys.log Content: 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

     

    Licensing Data-->

    Software licensing service version: 6.0.6002.18005

     

    Windows Activation Technologies-->

    N/A

     

    HWID Data-->

    HWID Hash Current: PAAAAAIABAABAAIAAgABAAAAAwABAAEA+l6yp87iRbHAQ8x7SOTiFYiAcHGysI3v8vQqbBLIxJ2sVvRI

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20000

    OEMID and OEMTableID Consistent: yes

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC HP     NISSAN  

      FACP HP     NISSAN  

      HPET HP     NISSAN  

      BOOT PTLTD $SBFTBL$

      MCFG HP     NISSAN  

      SLIC HPQOEM SLIC-MPC

      APIC HP     NISSAN  

      SSDT SataRe SataAhci

      SSDT SataRe SataAhci

     

     

     


    Sunday, August 28, 2011 9:13 AM

Answers

  • "TechKid" wrote in message news:2a71a277-32ad-43a1-885d-e39a148fc184...

    (I am reposting this cos i have more details...)

    I know a lot of people have this error, but mine is very very special. One day I happen to have this 'Vista Build 6002' and said my computer was not genuine. My background was black always. I searched for solutions but they didn't work. For example, the CMD method (http://social.microsoft.com/Forums/en-US/genuinevista/thread/00bf537e-b792-4fa2-b08c-7c8c532827aa), when it comes to the 'rename tokens.dat...' my CMD said the tokens.dat cannot be found or there's a duplicate. The phone method didn't worked at all, there is no 'select your country' or not even a phone activation. Rebooted more than twice and my problem is still there. PLEASE HELP! :'(

    Here's my MGADiag report.

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Status: Invalid License

    Validation Code: 50

    Cached Online Validation Code: 0xc004c4a8

    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3

    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=

    Windows Product ID: 89572-OEM-7332166-00021

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.0.6002.2.00010300.2.0.002

    ID: {C8B15D92-F96F-440F-A78B-3C22F8EF490B}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: Registered, 1.9.42.0

    Signed By: Microsoft

    Product Name: Windows Vista (TM) Home Basic

    Architecture: 0x00000000

    Build lab: 6002.vistasp2_gdr.110617-0336

    TTS Error: T:20110818135812053-M:20110828151831297-

     

     
    You have a Trusted Store Tamper, and an In-Memory Mod-Auth Tamper
    It’s likely the result of malware infestation, or a recent software update/install (on about the 16th-18th August)
    You need to update your Anti-Virus and run a full scan, then download, install, update and run Malwarebytes Anti-Malware (www.malwarebytes.org) free version – do NOT enable the real-time protection – and run a Full System scan in your main user account, and a Quick scan in all other accounts.
    Then post back with a new MGADiag report, and details of the number and type of infections found.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Wednesday, August 31, 2011 9:06 PM
    • Marked as answer by Darin Smith MS Thursday, September 1, 2011 9:05 PM
    Sunday, August 28, 2011 10:55 AM
    Moderator