none
Vista unauthorized change was made, error 0XC004D401

    Question

  • Hi. I have an Acer Aspire 5920 laptop that came with Windows Vista Home Premium installed. Two days ago I tried to boot up the laptop but was greeted with a Windows Activation dialog that read "An unauthorized change was made to Windows". The details dropdown shows Error: 0XC004D401 as the cause. Clicking on "Learn more online" brings up Firefox (my default internet browser) and the page "http://www.microsoft.com/genuine/validate/?OSV=6.0.6001.2.00010300.1.0.000.00.1033&RFM=2&LegitCheckError=C004D401", which says "Windows validation in progress" and sits there indefinitely.

    After searching through this forum, I see that others have had this issue as well. I have been trying to follow the troubleshooting tips to narrow down the program that is causing this issue, but I am a little stuck.

    Firefox (v 5.0) does not recognize the address "windir%\system32\perfmon.msc" when I type it into the address bar, so I cannot get Perfmon to run. I can't switch to IE because my Start menu is unavailable and the Windows key is also unresponsive.

    Below I have copied the results of the MGA Diagnostic, if it is useful. I have average computing skills so I apologize if this is covering old ground. Have I missed something, or is there something else I could try?

    Thanks in advance for any help.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-XY9X3-JDXYP-6CJ97
    Windows Product Key Hash: xFQJU8srKsovk6p1Lk1yW93in4E=
    Windows Product ID: 89578-OEM-7332157-00211
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.003
    ID: {58CB1ADC-A764-462F-9D39-11A7C3B9A380}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_gdr.091208-0542
    TTS Error: M:20110710202326510-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{58CB1ADC-A764-462F-9D39-11A7C3B9A380}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-6CJ97</PKey><PID>89578-OEM-7332157-00211</PID><PIDType>2</PIDType><SID>S-1-5-21-997453819-2741523849-3108435754</SID><SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920     </Model></SYSTEM><BIOS><Manufacturer>Acer   </Manufacturer><Version>v1.3811</Version><SMBIOSVersion major="2" minor="4"/><Date>20080314000000.000000+000</Date></BIOS><HWID>91333507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Australia Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57014</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: U1BMRwEAAAAAAQAABAAAAJIFAAAAAAAAYWECAAQwDpIuoT4r/D7MARhy9171jCizkdIEkQaJZ67rXCPt+D4TmrolB1KBuMkwy9jtm3xw2zOE+M46StOh6lF0H9Oh+hJEw7XKSAShRbf8VjeMVFgJQjqnjyFtyqIe1mjkjzXhcq94m48ceJqGOPu1UvB7bxiIfUEtgIRGphkOSa+EGUYcOX5/UvkAHnVxZcgJE7vAy9kku8TlF45JWpsbJiscvAYWgzyFZ0z79y0OKm53Bw867hHNE43WvZqUI0Rf1MqA3D5sWfEw7WeNfzOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAw=

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: PAAAAAEABgABAAIAAQABAAAAAwABAAEAJJTarUiogJRWLxp8blOivEaDfELCP3C+8vR2AuoHHlesViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         CRESTLNE
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      BOOT            PTLTD         $SBFTBL$
      MCFG            INTEL         CRESTLNE
      APIC            INTEL         CRESTLNE
      SLIC            ACRSYS        ACRPRDCT
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci

    Tuesday, July 12, 2011 1:34 PM

Answers

  • "Stephen_B" wrote in message news:4faaedf5-3287-4f9e-95e9-df8116a1f76e...

    Hi. I have an Acer Aspire 5920 laptop that came with Windows Vista Home Premium installed. Two days ago I tried to boot up the laptop but was greeted with a Windows Activation dialog that read "An unauthorized change was made to Windows". The details dropdown shows Error: 0XC004D401 as the cause. Clicking on "Learn more online" brings up Firefox (my default internet browser) and the page "http://www.microsoft.com/genuine/validate/?OSV=6.0.6001.2.00010300.1.0..000.00.1033&RFM=2&LegitCheckError=C004D401", which says "Windows validation in progress" and sits there indefinitely.

    After searching through this forum, I see that others have had this issue as well. I have been trying to follow the troubleshooting tips to narrow down the program that is causing this issue, but I am a little stuck.

    Firefox (v 5.0) does not recognize the address "windir%\system32\perfmon.msc" when I type it into the address bar, so I cannot get Perfmon to run. I can't switch to IE because my Start menu is unavailable and the Windows key is also unresponsive.

    Below I have copied the results of the MGA Diagnostic, if it is useful. I have average computing skills so I apologize if this is covering old ground. Have I missed something, or is there something else I could try?

    Thanks in advance for any help.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-XY9X3-JDXYP-6CJ97
    Windows Product Key Hash: xFQJU8srKsovk6p1Lk1yW93in4E=
    Windows Product ID: 89578-OEM-7332157-00211
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.003
    ID: {58CB1ADC-A764-462F-9D39-11A7C3B9A380}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_gdr.091208-0542
    TTS Error: M:20110710202326510-

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401


    Please see the advice in the Note to Avast users post here....
     
     
    http://social.microsoft.com/Forums/en-US/genuinevista/thread/E2F066B3-2517-41BC-8FAD-4C036F2F4AC8
     
    You should also scan your system using Malwarebytes Anti-Malware (www.malwarebytes.org - do NOT enable the resident scanner when you install it)
     
     
    Note also that your installation of Office is non-genuine, being based on a Volume License Key that was issued to MS itself in 2003, stolen in 2004, and immediately blocked. You should replace this with a legitimate version of whatever Office Suite you wish.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, July 12, 2011 7:53 PM
    Moderator