Answered by:
An unauthorised change was made to Windows

Question
-
Hi,
I get a pop up window saying that "an unauthorised change was made to Windows." The error message code is 0xC004D401
When I go online to "learn more online" I try and validate windows but it fails and says:
This copy of Windows did not pass genuine validation.
A software program installed on this computer may be incompatible with Windows Vista.I have looked through the list of known software conflicts and the only thing I have ever used is Trend PC Cillin. I have removed Trend over a year ago (even before upgrading to Vista). If I search my computer for "trend" I find a few files and folders that have trend in the title but I can't delete them because it says the files can no longer be found. This aside, I don't really think the problem is related to Trend as my version of trend was more recent than the version known to have issues with Vista.
I tried chkdsk and all seemed ok.
I tried the net start slsvs command also without sucess.
I had this validation error a few months back and it just seemed to go away but now it's back with a vengence. Any ideas?
Thanks.
Diagnostic Report (1.7.0066.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
Online Validation Code: 0xc004d401
Cached Validation Code: N/A, hr = 0xc004d401
Windows Product Key: N/A, hr=0xc004d401
Windows Product Key Hash: N/A, hr=0xc004d401
Windows Product ID: 55041-038-7023522-71575
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.0.6000.2.00010100.0.0.006
CSVLK Server: N/A
CSVLK PID: N/A
ID: {7F5F5CEA-432D-4D74-B419-F069F000259D}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.59.1
Signed By: Microsoft
Product Name: Windows Vista (TM) Business
Architecture: 0x00000000
Build lab: 6000.vista_gdr.071009-1548
TTS Error: K:20071210211405711-M:20071228090310111-
Validation Diagnostic:
Resolution Status: N/ANotifications Data-->
Cached Result: N/A
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 114 Blocked VLK 2
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: FCEE394C-2989-80070002_025D1FF3-282-80041013_025D1FF3-170-80041013_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7F5F5CEA-432D-4D74-B419-F069F000259D}</UGUID><Version>1.7.0066.0</Version><OS>6.0.6000.2.00010100.0.0.006</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-038-7023522-71575</PID><PIDType>6</PIDType><SID>S-1-5-21-839522115-1715567821-2147167427</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS A8N-E ACPI BIOS Revision 1006</Version><SMBIOSVersion major="2" minor="3"/><Date>20050630000000.000000+000</Date></BIOS><HWID>3B5A3A07018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57718</Pid><PidType>14</PidType></Product><Product GUID="{90170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>5EA9C3672EB0500</Val><Hash>GZD+9sfb5ecL3RxyV4F75a86u2M=</Hash><Pid>72079-640-0000106-55375</Pid><PidType>14</PidType></Product><Product GUID="{903B0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Project Professional 2003</Name><Ver>11</Ver><Val>5EA9C3672EB0500</Val><Hash>GZD+9sfb5ecL3RxyV4F75a86u2M=</Hash><Pid>72077-640-0000106-55315</Pid><PidType>14</PidType></Product></Products></Office></Software></GenuineResults>Spsys.log Content: U1BMRwEAAAAAAQAABAAAAAJZ
Friday, December 28, 2007 11:22 AM
Answers
-
Hello gcol,
I am glad you were able to resolve your issue.
On a side note, I noticed your copy of Vista is of a License Type: Volume MAK. This means the Vista is licensed to a Large Company or Government Agency. In this case I suggest contacting your Network Admin or IT Dept. and ask what Anti-Virus software is authorized for use within your organization.
In addition, I also see that your copy of Microsoft Office Professional Edition 2003 was installed using a Blocked VLK key. Please uninstall this copy of Office immediatly as your organization could incure heavy fines for running Unlicensed software. Your Network Admin or IT Dept. would be able to provide you with your organization's legitimate Office VLK key.
Thank you,
Darin Smith
WGA Forum Manager
Friday, December 28, 2007 9:33 PM
All replies
-
OK, just as a quick follow up to the above post. I think I've found a solution. It seems that a few people have found the same problem with the antivirus software I use (kaspersky). The solution is to change the start value for kaspersky in safe mode.
boot in safe mode, open regedit through start->run, type in regedit and press ok.
in the left side navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Klif
(Where "Klif" refers to to Kaspersky)
in the right side you will see a Start entry with the value 1, double click it and set the value to 2 or 3. close regedit and reboot (I used 3)
Rebooted and I no longer get the "unauthorised change to windows" error. Doing this turned off the Aero display when Windows booted back up, but that is easily reselected. Hope this has done the trick.Friday, December 28, 2007 12:21 PM -
Hello gcol,
I am glad you were able to resolve your issue.
On a side note, I noticed your copy of Vista is of a License Type: Volume MAK. This means the Vista is licensed to a Large Company or Government Agency. In this case I suggest contacting your Network Admin or IT Dept. and ask what Anti-Virus software is authorized for use within your organization.
In addition, I also see that your copy of Microsoft Office Professional Edition 2003 was installed using a Blocked VLK key. Please uninstall this copy of Office immediatly as your organization could incure heavy fines for running Unlicensed software. Your Network Admin or IT Dept. would be able to provide you with your organization's legitimate Office VLK key.
Thank you,
Darin Smith
WGA Forum Manager
Friday, December 28, 2007 9:33 PM