Answered by:
Vista activation error :0xc004D401 please help

Question
-
hi i had to reformat my laptop yesterday due to windows not booting properly. after i fresh installed windows i get this error message pop up all the time:
An unauthorized change was made to windows
you will no longer receive notifications, including those about your license or activation. use the linnk below to find
out how to fix your system.
error:0xc004D401
Description:
the security processor reported a system file mismatch
error.
ive read other threads and have none of those programs running as it is a fresh install. however spyware doctor may have been running when my pc got an error before i formatted.
results from
microsoft diagnostic tool are:
Diagnostic Report (1.7.0062.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
Online Validation Code: 0xc004d401
Cached Validation Code: N/A, hr = 0xc004d401
Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
Windows Product ID: 89578-OEM-7332157-00061
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6000.2.00010300.0.0.000
CSVLK Server: N/A
CSVLK PID: N/A
ID: {7B59212A-B6A9-4C32-818E-21EF0F164EC3}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.59.1
Signed By: Microsoft
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6000.vista_gdr.070627-1500
TTS Error: M:20071102233229121-
Validation Diagnostic:
Resolution Status: N/A
WgaER Data-->
Grace Flag: N/A, hr = 0xc004d401
Commit: N/A, hr = 0xc004d401
Reboot Flag: 0x0
ThreatID(s): N/A, hr = 0xc004d401
Wgaer.exe Version: N/A, hr = 0x80070002
Wgaer.exe Signed By: N/A, hr = 0x80070002
Notifications Data-->
Cached Result: N/A
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: FCEE394C-2968-80070002
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7B59212A-B6A9-4C32-818E-21EF0F164EC3}</UGUID><Version>1.7.0062.0</Version><OS>6.0.6000.2.00010300.0.0.000</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-3929639231-2143430547-400096913</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Presario F500 (RY574EA#ABU) </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.03 </Version><SMBIOSVersion major="2" minor="4"/><Date>20061221000000.000000+000</Date></BIOS><HWID>09323507018400EC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults>
Spsys.log Content: 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
1 last thing, when i try to activate through command menu i got this error:
script: c:\windows\system32\slmgr.vbs
line: 291
char: 5
error: 0xC004D401
code: C004D401
source: (NULL)
PLEASE HELPSaturday, November 3, 2007 12:38 AM
Answers
-
Hi Rik.uk,
What's happening is called a Tamper State. There is a program that is incompatible with Vista and when that program does something that Vista doesn't allow, Vista goes into Tamper.
The list of incompatible programs, that you read about, is only a list of programs Known to cause this type of issue, there may be others that we are not aware of.
We currently do not have any tool to allow us to tell you specifically what program is causing the issue, but since it's a freash Vista install, it should be fairly easy for you to narrow down the offending program. Once you have isolated the program, uninstall it.
(One point of note is that the system process, that detects a tamper, runs randomly, so it is unlikely that you will receive the Tamper notice right as you launch the bad program, but when you do receive the tamper notice, the program that is causing it, would still be running.)
Thank you,
Darin Smith
WGA Forum ManageFriday, November 9, 2007 9:11 PM