Answered by:
Just restored computer to factory condition and got "an unauthorized change was made to windows" message

Question
-
I've had my computer a couple of years now and I decided to restore my computer to factory condition a few hours ago. Now my computer is saying that an unauthorized change was made to it. It said the error was "0xC00D401 - the security system processor reported a system file mismatch error." When I run the microsoft genuine advantage diagnostic tool, this is what it says:
Diagnostic Report (1.9.0019.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Validation Code: N/A, hr = 0xc004d401
Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
Windows Product ID: 89583-OEM-7332157-00061
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6001.2.00010300.1.0.003
ID: {4CC37CD1-A32C-41A2-8B2C-40D4465014F4}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000009
Build lab: 6001.vistasp1_ldr.080917-1612
TTS Error: M:20110405235030057-
Validation Diagnostic:
Resolution Status: N/A
WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 102
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{4CC37CD1-A32C-41A2-8B2C-40D4465014F4}</UGUID><Version>1.9.0019.0</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89583-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-3124314181-760885658-1311216477</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv4 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.31</Version><SMBIOSVersion major="2" minor="4"/><Date>20090203000000.000000+000</Date></BIOS><HWID>CA313507018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 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
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401
Windows Activation Technologies-->
N/A
HWID Data-->
HWID Hash Current: NAAAAAEAAgABAAIAAQABAAAAAwABAAEA6GH8uo5auqt6fwZPLn/U6vL08Fj8a4g5rFZGyg==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20000
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC HPQOEM SLIC-MPC
FACP HP BLADE
HPET HPQOEM SLIC-MPC
BOOT HPQOEM SLIC-MPC
MCFG HPQOEM SLIC-MPC
DMAR
SSDT PmRef CpuPm
ASF! HPQOEM SLIC-MPC
SLIC HPQOEM SLIC-MPC
SSDT PmRef CpuPm
I have no idea what I did because I haven't done anything that I didn't do before going through the whole "restoration" process. Any help is appreciated. Thanks!
Wednesday, April 6, 2011 6:35 AM
Answers
-
"jensenbr" wrote in message news:31e827b6-6d50-41f8-a70f-cdfd827a986c...
I've had my computer a couple of years now and I decided to restore my computer to factory condition a few hours ago. Now my computer is saying that an unauthorized change was made to it. It said the error was "0xC00D401 - the security system processor reported a system file mismatch error." When I run the microsoft genuine advantage diagnostic tool, this is what it says:
Diagnostic Report (1.9.0019.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Validation Code: N/A, hr = 0xc004d401
Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
Windows Product ID: 89583-OEM-7332157-00061
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6001.2.00010300.1.0.003
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401
I have no idea what I did because I haven't done anything that I didn't do before going through the whole "restoration" process. Any help is appreciated. Thanks!
It looks like your Licensing Store is corrupted.Please try the below steps to recreate the Store files. This may resolve the issue.
1) Open an Internet Browser window.
2) Type: %windir%\system32 into the browser address bar.
3) Find the file CMD.exe
4) Right-Click on CMD.exe and select 'Run as Administrator'
5) Type: net stop slsvc (it may ask you if you are sure, select yes)
6) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing
7) Type: rename tokens.dat tokens.bar
8) Type: cd %windir%\system32
9) Type: net start slsvc
10) Type: cscript slmgr.vbs -rilc (It may take a long time for this to complete, please be patient)
11) Restart your computer twice.
12) You may be required to enter the Product Key and/or Activate.
Once complete, please post back with a new MGADiag report
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Thursday, April 7, 2011 10:57 PM
- Marked as answer by jensenbr Friday, April 8, 2011 12:10 AM
Wednesday, April 6, 2011 7:27 AMModerator
All replies
-
"jensenbr" wrote in message news:31e827b6-6d50-41f8-a70f-cdfd827a986c...
I've had my computer a couple of years now and I decided to restore my computer to factory condition a few hours ago. Now my computer is saying that an unauthorized change was made to it. It said the error was "0xC00D401 - the security system processor reported a system file mismatch error." When I run the microsoft genuine advantage diagnostic tool, this is what it says:
Diagnostic Report (1.9.0019.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Validation Code: N/A, hr = 0xc004d401
Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
Windows Product ID: 89583-OEM-7332157-00061
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6001.2.00010300.1.0.003
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401
I have no idea what I did because I haven't done anything that I didn't do before going through the whole "restoration" process. Any help is appreciated. Thanks!
It looks like your Licensing Store is corrupted.Please try the below steps to recreate the Store files. This may resolve the issue.
1) Open an Internet Browser window.
2) Type: %windir%\system32 into the browser address bar.
3) Find the file CMD.exe
4) Right-Click on CMD.exe and select 'Run as Administrator'
5) Type: net stop slsvc (it may ask you if you are sure, select yes)
6) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing
7) Type: rename tokens.dat tokens.bar
8) Type: cd %windir%\system32
9) Type: net start slsvc
10) Type: cscript slmgr.vbs -rilc (It may take a long time for this to complete, please be patient)
11) Restart your computer twice.
12) You may be required to enter the Product Key and/or Activate.
Once complete, please post back with a new MGADiag report
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Thursday, April 7, 2011 10:57 PM
- Marked as answer by jensenbr Friday, April 8, 2011 12:10 AM
Wednesday, April 6, 2011 7:27 AMModerator -
I went through the steps listed and got to the last part where it asked me to enter the product key BUT I could not enter it because I could no longer read it. The sticker on the bottom of my computer has been worn down making the writing impossible to read. So...I ended up using the restore discs again and I haven't gotten the error message since. Fingers crossed!
Thanks!
Friday, April 8, 2011 12:14 AM