locked
ATTN: NOEL D. PATON: error message 0xC004D401 RRS feed

  • Question

  • Hi Noel, I posted another question under RebekahH, which you directed me to do a download to get a report. Unfortunately, it won't let me sign in under that user name - just sends me to the Hotmail sign in page.

    here's the report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
    Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
    Windows Product ID: 89578-OEM-7332157-00061
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.003
    ID: {2828D141-B255-4997-97B6-74F2674778C9}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_gdr.101014-0432
    TTS Error: M:20110501103607583-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_B4D0AA8B-920-80070057

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{2828D141-B255-4997-97B6-74F2674778C9}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-4208905487-2187496117-646964654</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv2500 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.16</Version><SMBIOSVersion major="2" minor="4"/><Date>20080222000000.000000+000</Date></BIOS><HWID>4B333507018400EE</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7480B9502DF0D86</Val><Hash>oYWOW5ayFE3pZ+jvTpuXYsY64JE=</Hash><Pid>89388-707-8722531-65436</Pid><PidType>14</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: QgAAAAIABwABAAEAAgABAAAABAABAAEAnJ9UEhDeFT+cPQSrHHny+6LuBpiYYJKEuo3y9Hf2phHlqyitqmysVniq

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            HPQOEM        SLIC-MPC
      FACP            HPQOEM        SLIC-MPC
      SRAT            AMD           HAMMER 
      HPET            HPQOEM        SLIC-MPC
      BOOT            HPQOEM        SLIC-MPC
      MCFG            HPQOEM        SLIC-MPC
      WDAT            PTLTD         WDATTBL
      SLIC            HPQOEM        SLIC-MPC
      SSDT            HPQOEM        SLIC-MPC


    What do I do now??

     

    thanks!

    Rebekah


    • Edited by RebekahH2 Wednesday, May 4, 2011 1:49 AM deleting email address
    Sunday, May 1, 2011 3:04 PM

Answers

  • "RebekahH2" wrote in message news:3bcb68d1-05fe-4358-90ff-38b08fc309aa...

    Hi There

     

    I'm using Avast Free Edition, which automatically updates. It runs a full scan every week. No viruses have been detected lately. The late install was an automatic Windows update (the one that shows up when you shut down your computer), Not sure what it was for though. It shut down properly after the update was completed, then when I went to start up the computer the next day, the problem was there.


    I've managed to enter windows in Safe Mode and restore the previous session (thanks to help from someone who knows more about computers than I do), so I've now got access to my start menu & desk top. This is fine for a temp work around, but obviously I don't want to do any updates and wind up back where I was.

    How do I correct the underlying Tamper problem?

     

    PS, thanks for the heads up about the email address... i was desperate to solve the problem and wanted to make sure I could be contacted as it wouldn't let me "reply" :(

     


    Windows checks its activation status on every boot - so it's not unusual for a problem to show up at boot after updates, and may be unconnected.
    Since you've already done a System Restore, I'd check for malware using a specialist malware scanner - Malwarebytes Anti-Malware is current best-of-breed (www.malwarebytes.org) and free, so download it, and install it, update it, and run a Full System scan - see what it finds. If you have more than one User profile on the machine, run a Quick scan in all the others.
     
    Once you've done that, please run another MGADiag report, and post the new result - we'll take it from there.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, May 4, 2011 7:35 AM
    Moderator

All replies

  • "RebekahH2" wrote in message news:2dfa2d64-4c0c-42d2-a197-6409d63d3a5d...

    Hi Noel, I posted another question under RebekahH, which you directed me to do a download to get a report. Unfortunately, it won't let me sign in under that user name - just sends me to the Hotmail sign in page.

    here's the report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
    Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
    Windows Product ID: 89578-OEM-7332157-00061
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.003
    ID: {2828D141-B255-4997-97B6-74F2674778C9}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_gdr.101014-0432
    TTS Error: M:20110501103607583-


    Please use the Reply button in future - this avoids creating new threads all the time :)
    Please also edit out your email address - unless you really want to get spammed to death.
    Just come back to the forum every once in a while to check whether there have been any responses (although you should get email notifications if you've set them up).
     
    You have an In-Memory Mod_Auth Tamper - which seems to be happening a LOT this last week or so (much more than normal anyhow).
     
    What Security software are you using (Anti-Virus, firewall etc)? Is it up-to-date? When did you last run a full system scan with it?
     
    What did you install (that you know of) in the 3 days before this started happening?
     
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, May 1, 2011 3:31 PM
    Moderator
  • Hi There

     

    I'm using Avast Free Edition, which automatically updates. It runs a full scan every week. No viruses have been detected lately. The late install was an automatic Windows update (the one that shows up when you shut down your computer), Not sure what it was for though. It shut down properly after the update was completed, then when I went to start up the computer the next day, the problem was there.


    I've managed to enter windows in Safe Mode and restore the previous session (thanks to help from someone who knows more about computers than I do), so I've now got access to my start menu & desk top. This is fine for a temp work around, but obviously I don't want to do any updates and wind up back where I was.

    How do I correct the underlying Tamper problem?

     

    PS, thanks for the heads up about the email address... i was desperate to solve the problem and wanted to make sure I could be contacted as it wouldn't let me "reply" :(

     

    Wednesday, May 4, 2011 1:48 AM
  • "RebekahH2" wrote in message news:3bcb68d1-05fe-4358-90ff-38b08fc309aa...

    Hi There

     

    I'm using Avast Free Edition, which automatically updates. It runs a full scan every week. No viruses have been detected lately. The late install was an automatic Windows update (the one that shows up when you shut down your computer), Not sure what it was for though. It shut down properly after the update was completed, then when I went to start up the computer the next day, the problem was there.


    I've managed to enter windows in Safe Mode and restore the previous session (thanks to help from someone who knows more about computers than I do), so I've now got access to my start menu & desk top. This is fine for a temp work around, but obviously I don't want to do any updates and wind up back where I was.

    How do I correct the underlying Tamper problem?

     

    PS, thanks for the heads up about the email address... i was desperate to solve the problem and wanted to make sure I could be contacted as it wouldn't let me "reply" :(

     


    Windows checks its activation status on every boot - so it's not unusual for a problem to show up at boot after updates, and may be unconnected.
    Since you've already done a System Restore, I'd check for malware using a specialist malware scanner - Malwarebytes Anti-Malware is current best-of-breed (www.malwarebytes.org) and free, so download it, and install it, update it, and run a Full System scan - see what it finds. If you have more than one User profile on the machine, run a Quick scan in all the others.
     
    Once you've done that, please run another MGADiag report, and post the new result - we'll take it from there.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, May 4, 2011 7:35 AM
    Moderator
  • No further reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS
    Thursday, May 12, 2011 6:10 PM