locked
An unauthorised change was made to Windows RRS feed

  • Question

  • Hi,

    I get a pop up window saying that "an unauthorised change was made to Windows."  The error message code is 0xC004D401

    When I go online to "learn more online" I try and validate windows but it fails and says:

    This copy of Windows did not pass genuine validation.
    A software program installed on this computer may be incompatible with Windows Vista.

     

    I have looked through the list of known software conflicts and the only thing I have ever used is Trend PC Cillin.  I have removed Trend over a year ago (even before upgrading to Vista).  If I search my computer for "trend" I find a few files and folders that have trend in the title but I can't delete them because it says the files can no longer be found.  This aside, I don't really think the problem is related to Trend as my version of trend was more recent than the version known to have issues with Vista.

     

    I tried chkdsk and all seemed ok.

     

    I tried the net start slsvs command also without sucess.

     

    I had this validation error a few months back and it just seemed to go away but now it's back with a vengence.  Any ideas?

     

    Thanks.

     

     

    Diagnostic Report (1.7.0066.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Online Validation Code: 0xc004d401
    Cached Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: N/A, hr=0xc004d401
    Windows Product Key Hash: N/A, hr=0xc004d401
    Windows Product ID: 55041-038-7023522-71575
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.0.6000.2.00010100.0.0.006
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {7F5F5CEA-432D-4D74-B419-F069F000259D}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.59.1
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Business
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.071009-1548
    TTS Error: K:20071210211405711-M:20071228090310111-
    Validation Diagnostic:
    Resolution Status: N/A

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2989-80070002_025D1FF3-282-80041013_025D1FF3-170-80041013_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{7F5F5CEA-432D-4D74-B419-F069F000259D}</UGUID><Version>1.7.0066.0</Version><OS>6.0.6000.2.00010100.0.0.006</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-038-7023522-71575</PID><PIDType>6</PIDType><SID>S-1-5-21-839522115-1715567821-2147167427</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS A8N-E ACPI BIOS Revision 1006</Version><SMBIOSVersion major="2" minor="3"/><Date>20050630000000.000000+000</Date></BIOS><HWID>3B5A3A07018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57718</Pid><PidType>14</PidType></Product><Product GUID="{90170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>5EA9C3672EB0500</Val><Hash>GZD+9sfb5ecL3RxyV4F75a86u2M=</Hash><Pid>72079-640-0000106-55375</Pid><PidType>14</PidType></Product><Product GUID="{903B0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Project Professional 2003</Name><Ver>11</Ver><Val>5EA9C3672EB0500</Val><Hash>GZD+9sfb5ecL3RxyV4F75a86u2M=</Hash><Pid>72077-640-0000106-55315</Pid><PidType>14</PidType></Product></Products></Office></Software></GenuineResults> 

    Spsys.log Content: U1BMRwEAAAAAAQAABAAAAAJZ

    Friday, December 28, 2007 11:22 AM

Answers

  • Hello gcol,

     

      I am glad you were able to resolve your issue.

     

      On a side note, I noticed your copy of Vista is of a License Type: Volume MAK. This means the Vista is licensed to a Large Company or Government Agency. In this case I suggest contacting your Network Admin or IT Dept. and ask what Anti-Virus software is authorized for use within your organization.

     

      In addition, I also see that your copy of Microsoft Office Professional Edition 2003 was installed using a Blocked VLK key. Please uninstall this copy of Office immediatly as your organization could incure heavy fines for running Unlicensed software. Your Network Admin or IT Dept. would be able to provide you with your organization's legitimate Office VLK key.

     

    Thank you,

    Darin Smith

    WGA Forum Manager

     

    Friday, December 28, 2007 9:33 PM

All replies

  • OK, just as a quick follow up to the above post.  I think I've found a solution.  It seems that a few people have found the same problem with the antivirus software I use (kaspersky).  The solution is to change the start value for kaspersky in safe mode.

    boot in safe mode, open regedit through start->run, type in regedit and press ok.
    in the left side navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Klif

    (Where "Klif" refers to to Kaspersky)

    in the right side you will see a Start entry with the value 1, double click it and set the value to 2 or 3. close regedit and reboot (I used 3)

    Rebooted and I no longer get the "unauthorised change to windows" error.  Doing this turned off the Aero display when Windows booted back up, but that is easily reselected.  Hope this has done the trick.
    Friday, December 28, 2007 12:21 PM
  • Hello gcol,

     

      I am glad you were able to resolve your issue.

     

      On a side note, I noticed your copy of Vista is of a License Type: Volume MAK. This means the Vista is licensed to a Large Company or Government Agency. In this case I suggest contacting your Network Admin or IT Dept. and ask what Anti-Virus software is authorized for use within your organization.

     

      In addition, I also see that your copy of Microsoft Office Professional Edition 2003 was installed using a Blocked VLK key. Please uninstall this copy of Office immediatly as your organization could incure heavy fines for running Unlicensed software. Your Network Admin or IT Dept. would be able to provide you with your organization's legitimate Office VLK key.

     

    Thank you,

    Darin Smith

    WGA Forum Manager

     

    Friday, December 28, 2007 9:33 PM