Answered by:
Vista unauthorized change was made, error 0XC004D401

Question
-
Hi. I have an Acer Aspire 5920 laptop that came with Windows Vista Home Premium installed. Two days ago I tried to boot up the laptop but was greeted with a Windows Activation dialog that read "An unauthorized change was made to Windows". The details dropdown shows Error: 0XC004D401 as the cause. Clicking on "Learn more online" brings up Firefox (my default internet browser) and the page "http://www.microsoft.com/genuine/validate/?OSV=6.0.6001.2.00010300.1.0.000.00.1033&RFM=2&LegitCheckError=C004D401", which says "Windows validation in progress" and sits there indefinitely.
After searching through this forum, I see that others have had this issue as well. I have been trying to follow the troubleshooting tips to narrow down the program that is causing this issue, but I am a little stuck.
Firefox (v 5.0) does not recognize the address "windir%\system32\perfmon.msc" when I type it into the address bar, so I cannot get Perfmon to run. I can't switch to IE because my Start menu is unavailable and the Windows key is also unresponsive.
Below I have copied the results of the MGA Diagnostic, if it is useful. I have average computing skills so I apologize if this is covering old ground. Have I missed something, or is there something else I could try?
Thanks in advance for any help.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0xc004d401
Windows Product Key: *****-*****-XY9X3-JDXYP-6CJ97
Windows Product Key Hash: xFQJU8srKsovk6p1Lk1yW93in4E=
Windows Product ID: 89578-OEM-7332157-00211
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6001.2.00010300.1.0.003
ID: {58CB1ADC-A764-462F-9D39-11A7C3B9A380}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6001.vistasp1_gdr.091208-0542
TTS Error: M:20110710202326510-
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 114 Blocked VLK 2
Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{58CB1ADC-A764-462F-9D39-11A7C3B9A380}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-6CJ97</PKey><PID>89578-OEM-7332157-00211</PID><PIDType>2</PIDType><SID>S-1-5-21-997453819-2741523849-3108435754</SID><SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920 </Model></SYSTEM><BIOS><Manufacturer>Acer </Manufacturer><Version>v1.3811</Version><SMBIOSVersion major="2" minor="4"/><Date>20080314000000.000000+000</Date></BIOS><HWID>91333507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Australia Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57014</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: U1BMRwEAAAAAAQAABAAAAJIFAAAAAAAAYWECAAQwDpIuoT4r/D7MARhy9171jCizkdIEkQaJZ67rXCPt+D4TmrolB1KBuMkwy9jtm3xw2zOE+M46StOh6lF0H9Oh+hJEw7XKSAShRbf8VjeMVFgJQjqnjyFtyqIe1mjkjzXhcq94m48ceJqGOPu1UvB7bxiIfUEtgIRGphkOSa+EGUYcOX5/UvkAHnVxZcgJE7vAy9kku8TlF45JWpsbJiscvAYWgzyFZ0z79y0OKm53Bw867hHNE43WvZqUI0Rf1MqA3D5sWfEw7WeNfzOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAw=
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401
Windows Activation Technologies-->
N/A
HWID Data-->
HWID Hash Current: PAAAAAEABgABAAIAAQABAAAAAwABAAEAJJTarUiogJRWLxp8blOivEaDfELCP3C+8vR2AuoHHlesViqF
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20000
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INTEL CRESTLNE
FACP INTEL CRESTLNE
HPET INTEL CRESTLNE
BOOT PTLTD $SBFTBL$
MCFG INTEL CRESTLNE
APIC INTEL CRESTLNE
SLIC ACRSYS ACRPRDCT
SSDT SataRe SataAhci
SSDT SataRe SataAhci
SSDT SataRe SataAhci
SSDT SataRe SataAhci
Tuesday, July 12, 2011 1:34 PM
Answers
-
"Stephen_B" wrote in message news:4faaedf5-3287-4f9e-95e9-df8116a1f76e...
Hi. I have an Acer Aspire 5920 laptop that came with Windows Vista Home Premium installed. Two days ago I tried to boot up the laptop but was greeted with a Windows Activation dialog that read "An unauthorized change was made to Windows". The details dropdown shows Error: 0XC004D401 as the cause. Clicking on "Learn more online" brings up Firefox (my default internet browser) and the page "http://www.microsoft.com/genuine/validate/?OSV=6.0.6001.2.00010300.1.0..000.00.1033&RFM=2&LegitCheckError=C004D401", which says "Windows validation in progress" and sits there indefinitely.
After searching through this forum, I see that others have had this issue as well. I have been trying to follow the troubleshooting tips to narrow down the program that is causing this issue, but I am a little stuck.
Firefox (v 5.0) does not recognize the address "windir%\system32\perfmon.msc" when I type it into the address bar, so I cannot get Perfmon to run. I can't switch to IE because my Start menu is unavailable and the Windows key is also unresponsive.
Below I have copied the results of the MGA Diagnostic, if it is useful. I have average computing skills so I apologize if this is covering old ground. Have I missed something, or is there something else I could try?
Thanks in advance for any help.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0xc004d401
Windows Product Key: *****-*****-XY9X3-JDXYP-6CJ97
Windows Product Key Hash: xFQJU8srKsovk6p1Lk1yW93in4E=
Windows Product ID: 89578-OEM-7332157-00211
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6001.2.00010300.1.0.003
ID: {58CB1ADC-A764-462F-9D39-11A7C3B9A380}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6001.vistasp1_gdr.091208-0542
TTS Error: M:20110710202326510-
OGA Data-->
Office Status: 114 Blocked VLK 2
Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401
http://social.microsoft.com/Forums/en-US/genuinevista/thread/E2F066B3-2517-41BC-8FAD-4C036F2F4AC8
You should also scan your system using Malwarebytes Anti-Malware (www.malwarebytes.org - do NOT enable the resident scanner when you install it)
Note also that your installation of Office is non-genuine, being based on a Volume License Key that was issued to MS itself in 2003, stolen in 2004, and immediately blocked. You should replace this with a legitimate version of whatever Office Suite you wish.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Tuesday, July 12, 2011 10:50 PM
- Marked as answer by Darin Smith MS Friday, July 15, 2011 7:47 PM
Tuesday, July 12, 2011 7:53 PMModerator