none
Error: 0xC004D401, "An unauthorised change was made to windows" RRS feed

  • Question

  • I've seen the similar threads similar to these, but since users are advised to give the MGADiag.exe reports, I'm posting here since I haven't managed to solve my problem.

    I've started to get this popup since a few days: http://i52.tinypic.com/eafskk.jpg

    It first came on startup, and caused the system to restart several times.

    I had installed windows updates for the first time a couple of days before, but I'm not sure if the problem is related to it.

    I've also run a full boot-time antivirus scan (avast).

    Here is the MGADiag.exe report:

    Note: Even when running MGADiag.exe, I get that same popup two times (Consistently).

    Also, If MGADiag.exe is run just after starting the computer, the report shows validation status as "Genuine".

    If it is run a second time (and every time after that) it shows it as "Invalid Licence".

    I'm pasting both reports, in that order.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_ldr.101014-0432
    TTS Error: K:20110505222814529-M:20110506093205702-
    Validation Diagnostic: 
    Resolution Status: N/A
    
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 102
    2007 Microsoft Office system - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Users\Kritika\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BAABD381-5E48-4D6E-8F80-B1F844533A5B}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-1596457891-1701792257-2418275179</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Compaq 610</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68PVU Ver. F.05</Version><SMBIOSVersion major="2" minor="4"/><Date>20090728000000.000000+000</Date></BIOS><HWID>6E313507018400FA</HWID><UserLCID>4009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><Val>B9FA5600590D03E</Val><Hash>z8riMJtlT7LjuCMkHdYOugQRRr8=</Hash><Pid>89451-OEM-6603123-47662</Pid><PidType>11</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 
    
    Spsys.log Content: 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
    
    Licensing Data-->
    C:\windows\system32\slmgr.vbs(1635, 9) (null): 0xC004D401
    
    Windows Activation Technologies-->
    N/A
    
    HWID Data-->
    HWID Hash Current: NgAAAAEAAwABAAIAAQABAAAAAwABAAEAeqg0bDboQCyeHEaDLIRevxYg8vROLS6sVtKsViqF
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
     ACPI Table Name	OEMID Value	OEMTableID Value
     APIC			HP  		308A  
     FACP			HP  		308A  
     HPET			HP  		308A  
     MCFG			HP  		308A  
     SLIC			HPQOEM		SLIC-MPC
     TCPA			HP  		308A  
     SSDT			HP  		HPQSAT
     SSDT			HP  		HPQSAT
     SSDT			HP  		HPQSAT
     SSDT			HP  		HPQSAT
     SSDT			HP  		HPQSAT
    
    
    

    Report 2:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_ldr.101014-0432
    TTS Error: K:20110505222814529-M:20110506160825333-
    Validation Diagnostic: 
    Resolution Status: N/A
    
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 102
    2007 Microsoft Office system - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Users\Kritika\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BAABD381-5E48-4D6E-8F80-B1F844533A5B}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-1596457891-1701792257-2418275179</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Compaq 610</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68PVU Ver. F.05</Version><SMBIOSVersion major="2" minor="4"/><Date>20090728000000.000000+000</Date></BIOS><HWID>6E313507018400FA</HWID><UserLCID>4009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><Val>B9FA5600590D03E</Val><Hash>z8riMJtlT7LjuCMkHdYOugQRRr8=</Hash><Pid>89451-OEM-6603123-47662</Pid><PidType>11</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 
    
    Spsys.log Content: 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
    
    Licensing Data-->
    C:\windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401
    
    Windows Activation Technologies-->
    N/A
    
    HWID Data-->
    HWID Hash Current: NgAAAAEAAwABAAIAAQABAAAAAwABAAEAeqg0bDboQCyeHEaDLIRevxYg8vROLS6sVtKsViqF
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
     ACPI Table Name	OEMID Value	OEMTableID Value
     APIC			HP  		308A  
     FACP			HP  		308A  
     HPET			HP  		308A  
     MCFG			HP  		308A  
     SLIC			HPQOEM		SLIC-MPC
     TCPA			HP  		308A  
     SSDT			HP  		HPQSAT
     SSDT			HP  		HPQSAT
     SSDT			HP  		HPQSAT
     SSDT			HP  		HPQSAT
     SSDT			HP  		HPQSAT
    
    
    

    Friday, May 6, 2011 11:03 AM

Answers

  • "losererr" wrote in message news:5e6d2437-2427-4c8b-a7cb-622bbe028ca4...

    I've seen the similar threads similar to these, but since users are advised to give the MGADiag.exe reports, I'm posting here since I haven't managed to solve my problem.

    I've started to get this popup since a few days: http://i52.tinypic.com/eafskk.jpg

    It first came on startup, and caused the system to restart several times.

    I had installed windows updates for the first time a couple of days before, but I'm not sure if the problem is related to it.

    I've also run a full boot-time antivirus scan (avast).

    Here is the MGADiag.exe report:

    Note: Even when running MGADiag.exe, I get that same popup two times (Consistently).

    Also, If MGADiag.exe is run just after starting the computer, the report shows validation status as "Genuine".

    If it is run a second time (and every time after that) it shows it as "Invalid Licence".

    I'm pasting both reports, in that order.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_ldr.101014-0432
    TTS Error: K:20110505222814529-M:20110506093205702-
    
    

    Report 2:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_ldr.101014-0432
    TTS Error: K:20110505222814529-M:20110506160825333-
    
    
    


    Interesting - thanks for posting 'before & after' reports.
     
    Please UNINSTALL Avast, and use their cleanup tool to remove the dregs. then reboot - see if the reports change again, or not. (again, please post 'before & after' if you can) and whether the non-genuine notification goes away. (leave the system for at least 30 mins after the reboot)
     
    Either way, you can reinstall Avast again if you like before posting back with the results. There have been a lot of reports of this problem in the past couple of weeks, and the vast majority appear to have come from users of Avast, so I suspect that it's a problem with either a set of definitions, or the latest version upgrade.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Friday, May 6, 2011 11:16 PM
    • Marked as answer by losererr Saturday, May 7, 2011 4:41 PM
    • Unmarked as answer by losererr Tuesday, May 10, 2011 10:36 AM
    • Marked as answer by losererr Tuesday, May 10, 2011 10:37 AM
    • Unmarked as answer by losererr Tuesday, May 10, 2011 10:48 AM
    • Marked as answer by losererr Tuesday, May 10, 2011 10:50 AM
    Friday, May 6, 2011 2:34 PM
    Moderator

All replies

  • "losererr" wrote in message news:5e6d2437-2427-4c8b-a7cb-622bbe028ca4...

    I've seen the similar threads similar to these, but since users are advised to give the MGADiag.exe reports, I'm posting here since I haven't managed to solve my problem.

    I've started to get this popup since a few days: http://i52.tinypic.com/eafskk.jpg

    It first came on startup, and caused the system to restart several times.

    I had installed windows updates for the first time a couple of days before, but I'm not sure if the problem is related to it.

    I've also run a full boot-time antivirus scan (avast).

    Here is the MGADiag.exe report:

    Note: Even when running MGADiag.exe, I get that same popup two times (Consistently).

    Also, If MGADiag.exe is run just after starting the computer, the report shows validation status as "Genuine".

    If it is run a second time (and every time after that) it shows it as "Invalid Licence".

    I'm pasting both reports, in that order.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_ldr.101014-0432
    TTS Error: K:20110505222814529-M:20110506093205702-
    
    

    Report 2:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_ldr.101014-0432
    TTS Error: K:20110505222814529-M:20110506160825333-
    
    
    


    Interesting - thanks for posting 'before & after' reports.
     
    Please UNINSTALL Avast, and use their cleanup tool to remove the dregs. then reboot - see if the reports change again, or not. (again, please post 'before & after' if you can) and whether the non-genuine notification goes away. (leave the system for at least 30 mins after the reboot)
     
    Either way, you can reinstall Avast again if you like before posting back with the results. There have been a lot of reports of this problem in the past couple of weeks, and the vast majority appear to have come from users of Avast, so I suspect that it's a problem with either a set of definitions, or the latest version upgrade.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Friday, May 6, 2011 11:16 PM
    • Marked as answer by losererr Saturday, May 7, 2011 4:41 PM
    • Unmarked as answer by losererr Tuesday, May 10, 2011 10:36 AM
    • Marked as answer by losererr Tuesday, May 10, 2011 10:37 AM
    • Unmarked as answer by losererr Tuesday, May 10, 2011 10:48 AM
    • Marked as answer by losererr Tuesday, May 10, 2011 10:50 AM
    Friday, May 6, 2011 2:34 PM
    Moderator
  • Interesting - thanks for posting 'before & after' reports.

    Please UNINSTALL Avast, and use their cleanup tool to remove the dregs. then reboot - see if the reports change again, or not. (again, please post 'before & after' if you can) and whether the non-genuine notification goes away. (leave the system for at least 30 mins after the reboot)

    Either way, you can reinstall Avast again if you like before posting back with the results. There have been a lot of reports of this problem in the past couple of weeks, and the vast majority appear to have come from users of Avast, so I suspect that it's a problem with either a set of definitions, or the latest version upgrade.

    Thanks for the reply.

    I uninstalled avast! completely as you instructed, and indeed the notification went away. MGADiag.exe reports were also consistently "Genuine".

    On reinstalling avast!, the problem came up again, so I think we can be pretty sure it is avast! (I had upgraded to version 6 a few days back).

    Also, I cannot access the control panel, which quits after appearing for a split second. (This problem was there throughout, and also was solved during the period of uninstallation). Do you think installing Vista SP2, may solve this? (I realize this is an avast! problem and none of your business) .

    Anyways, I'm reporting this problem to avast! .

    As asked, here is the report generated by MGADiag.exe after avast! uninstallation. They are the same (including the values in the field you highlighted) so I don't think I need to post the second run report.

    Following that are the first and second run reports after avast! reinstallation. Again I don't think you need them so I'll just post the google docs links.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_ldr.101014-0432
    TTS Error: K:20110506223320157-M:20110507144925246-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 102
    2007 Microsoft Office system - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Users\Kritika\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BAABD381-5E48-4D6E-8F80-B1F844533A5B}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-1596457891-1701792257-2418275179</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Compaq 610</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68PVU Ver. F.05</Version><SMBIOSVersion major="2" minor="4"/><Date>20090728000000.000000+000</Date></BIOS><HWID>6E313507018400FA</HWID><UserLCID>4009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><Val>B9FA5600590D03E</Val><Hash>z8riMJtlT7LjuCMkHdYOugQRRr8=</Hash><Pid>89451-OEM-6603123-47662</Pid><PidType>11</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.0.6001.18000
    Name: Windows(TM) Vista, HomeBasic edition
    Description: Windows Operating System - Vista, OEM_SLP channel
    Activation ID: 199086aa-6cb8-4e5b-b698-f2be56f1e8ee
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89572-00146-321-600021-02-1033-6001.0000-2852009
    Installation ID: 014834512750488664100552706823406634749281931451627795
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: 44MV3
    License Status: Licensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: NgAAAAEAAwABAAIAAQABAAAAAwABAAEAeqg0bDboQCyeHEaDLIRevxYg8vROLS6sVtKsViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC HP 308A
    FACP HP 308A
    HPET HP 308A
    MCFG HP 308A
    SLIC HPQOEM SLIC-MPC
    TCPA HP 308A
    SSDT HP HPQSAT
    SSDT HP HPQSAT
    SSDT HP HPQSAT
    SSDT HP HPQSAT
    SSDT HP HPQSAT

    After reinstall:

    Report1: https://docs.google.com/document/d/10Qh70a2ZKCvub136NYImtIef1u0xqe8TWPrCq4E5YBo/edit?hl=en&authkey=CLyJgdgB

    Report2: https://docs.google.com/document/d/1G32E-6yyXbe-79JXZpEUj2XiCzpV1Oyejvkdv-azNPI/edit?hl=en&authkey=CI6_3UM


    • Edited by losererr Saturday, May 7, 2011 4:07 PM
    Saturday, May 7, 2011 3:52 PM
  • "losererr" wrote in message news:f684c26a-b967-4bda-bb1d-6e1511e50429...

    Thanks for the reply.

    I uninstalled avast! completely as you instructed, and indeed the notification went away. MGADiag.exe reports were also consistently "Genuine".

    On reinstalling avast!, the problem came up again, so I think we can be pretty sure it is avast! (I had upgraded to version 6 a few days back).

    Also, I cannot access the control panel, which quits after appearing for a split second. (This problem was there throughout, and also was solved during the period of uninstallation). Do you think installing Vista SP2, may solve this? (I realize this is an avast! problem and none of your business) ..

    Anyways, I'm reporting this problem to avast! .

    As asked, here is the report generated by MGADiag.exe after avast! uninstallation. They are the same so I don't think I need to post the second run report.

    Following that are the first and second run reports after avast! reinstallation. Again I don't think you need them so I'll just post the google docs links.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.002

     


    I'd say your experience is pretty proof-positive that Avast is the problem.
    It's possible that updating to SP2 would fix the issue - but do it without Avast installed.
    You should install SP2 anyhow - there are significant benefits to doing so and almost no drawbacks.
     
    Thanks for the detailed responses - it makes life easier, and allows us to better tailor our responses not only to yourself, but to others.

     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, May 7, 2011 4:04 PM
    Moderator
  • For those users still having this problem, I'd like to inform that installing Vista SP2 fixes the problem, and avast now happily exists.

    I've also noted that users with this problem are probably all running sp1.

    Monday, May 9, 2011 6:20 AM
  • "losererr" wrote in message news:57ace406-b5b0-43b7-a87b-5130d91b943e...

    For those users still having this problem, I'd like to inform that installing Vista SP2 fixes the problem, and avast now happily exists.

    I've also noted that users with this problem are probably all running sp1.


    Great! - good to know, and thanks for coming back to let us know.
     
    Can you post a new MGADiag report for us please?

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, May 9, 2011 7:19 AM
    Moderator
  • Here you go...

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: K:20110506223320157-M:20110509022233046-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 102
    2007 Microsoft Office system - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Kritika\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BAABD381-5E48-4D6E-8F80-B1F844533A5B}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-1596457891-1701792257-2418275179</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Compaq 610</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68PVU Ver. F.05</Version><SMBIOSVersion major="2" minor="4"/><Date>20090728000000.000000+000</Date></BIOS><HWID>6E313507018400FA</HWID><UserLCID>4009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><Val>B9FA5600590D03E</Val><Hash>z8riMJtlT7LjuCMkHdYOugQRRr8=</Hash><Pid>89451-OEM-6603123-47662</Pid><PidType>11</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomeBasic edition
    Description: Windows Operating System - Vista, OEM_SLP channel
    Activation ID: 199086aa-6cb8-4e5b-b698-f2be56f1e8ee
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89572-00146-321-600021-02-1033-6001.0000-2852009
    Installation ID: 014834512750488664100552706823406634749281931451627795
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: 44MV3
    License Status: Licensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: NgAAAAEAAwABAAIAAQABAAAAAwABAAEAeqg0bDboQCyeHEaDLIRevxYg8vROLS6sVtKsViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC HP 308A
    FACP HP 308A
    HPET HP 308A
    MCFG HP 308A
    SLIC HPQOEM SLIC-MPC
    TCPA HP 308A
    SSDT HP HPQSAT
    SSDT HP HPQSAT
    SSDT HP HPQSAT
    SSDT HP HPQSAT
    SSDT HP HPQSAT



    Monday, May 9, 2011 9:35 AM
  • "losererr" wrote in message news:ac67a7c5-a100-4e29-9ff2-80368f1ddafb...

    Here you go...

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.002
    ID: {BAABD381-5E48-4D6E-8F80-B1F844533A5B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: K:20110506223320157-M:20110509022233046-



    You still have a current Mod-Auth Tamper present :(
     
    You say you're not getting a non-genuine notification any more?
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, May 9, 2011 10:39 AM
    Moderator
  • You still have a current Mod-Auth Tamper present :(
     
    You say you're not getting a non-genuine notification any more?

    No. Earlier the notification popped up randomly quite frequently and when running MGADiag.exe. Now I must have run MGADiag.exe dozens of times and it has never come again.

    I can also access the control panel now.

    What piece of information in the report points to a Mod-Auth Tamper? Is it serious and can it be removed?

    Also, were the earlier reports  (when avast was uninstalled) clear or did they also show a Mod-Auth Tamper?

    Monday, May 9, 2011 12:13 PM
  • "losererr" wrote in message news:041f6a3f-92e7-4dd2-8db1-4ab3c4ce68b5...
    You still have a current Mod-Auth Tamper present :(
     
    You say you're not getting a non-genuine notification any more?

    No. Earlier the notification popped up randomly quite frequently and when running MGADiag.exe. Now I must have run MGADiag.exe dozens of times and it has never come again.

    I can also access the control panel now.

    What piece of information in the report points to a Mod-Auth Tamper? Is it serious and can it be removed?

    Also, were the earlier reports  (when avast was uninstalled) clear or did they also show a Mod-Auth Tamper?

    TTS Error: K:20110506223320157-M:20110509022233046-
    As you can see - that has today's timestamp on it. The previous one from when Avast had been uninstalled showed an older date than the uninstall (at least from my reading of it).....
    TTS Error: K:20110506223320157-M:20110507144925246-
    although it was slightly more recent than the original....
    TTS Error: K:20110505222814529-M:20110506093205702-
    Mod-Auth Tampers can (should?) result in non-genuine messages, because they indicate (at least in this case) that a file in memory doesn't match what's on the disk (or we'd see it in the File Scan Data section of the report).
     
    Idea (if you have the time and inclination) .....
    In one session - preferably doing nothing else - waiting 10 minutes before each run of MGADiag so that the machine has a chance to settle down....
     
    1) run MGADiag (save only the TTS Error line)
    2) Uninstall Avast
    3) run MGADiag (save only the TTS Error line)
    4) run Avast cleanup tool
    5) run MGADiag (save only the TTS Error line)
    6) reboot
    7) run MGADiag (save only the TTS Error line)
    8) reboot again
    9) run MGADiag (save only the TTS Error line)
    10) reboot again
    11) run MGADiag (save only the TTS Error line)
    12) reinstall Avast (do not update or reboot yet, even if it asks to)
    13) run MGADiag (save only the TTS Error line)
    14) reboot
    15) run MGADiag (save only the TTS Error line)
    16) update Avast
    17) run MGADiag (save only the TTS Error line)
    18) reboot
    19) run MGADiag (save only the TTS Error line)
     
    post the set of MGADiag TTS Errors, and we'll see what's happening.
    If you can't for whatever reason do the full set, just let us know what you actually did, and we'll work with that :)
     
     
    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, May 9, 2011 12:38 PM
    Moderator
  • OK I'll do the drill tonight.

    When you say "update avast" you mean the virus definitions or the program version. (since the program version is the most recent)

    Or do you mean install the previous version that wasn't causing problems (ver 5) and then update to the one that started the problem (ver. 6)

     

    Also, I didn't quite understand your explanation regarding how the timestamps show a mod-auth tamper. Aren't the dates all what they should be? Is is the actual explanation too technical for me? :)




    Monday, May 9, 2011 1:17 PM
  • "losererr" wrote in message news:0e5cb8a4-d9a1-436b-9fd0-38e6a27e5b28...

    OK I'll do the drill tonight.

    When you say "update avast" you mean the virus definitions or the program version. (since the program version is the most recent)

    Or do you mean install the previous version that wasn't causing problems (ver 5) and then update to the one that started the problem (ver. 6)

     

    Also, I didn't quite understand your explanation regarding how the timestamps show a mod-auth tamper. Aren't the dates all what they should be? Is is the actual explanation too technical for me? :)





    The TTS errors in a 'perfect' system don't appear at all - the entry is blank.
    The timestamps shown are the times at which the system last detected a fault.
     
    I suspect that v5 Avast won't show the problem (I wouldn't mid you trying it to see<g>) - but yes, I meant to install Avast v6, and only allow updates after the reboot.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, May 9, 2011 1:36 PM
    Moderator
  • Phew...

    1) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    2) Uninstall Avast
    3) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    4) run Avast cleanup tool- Avast cleanup tool says it won't uninstall itself because the "Avast self protection module" is enabled. Therefore, I reboot.
    5) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    6) reboot
    7) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    8) reboot again
    9) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    10) reboot again
    11) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    12) reinstall Avast (do not update or reboot yet, even if it asks to)
    13) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    14) reboot

    It's 10th of May now.

    15) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    16) update Avast
    17) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    18) reboot
    19) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    20) run MGADiag (TTS Error: K:20110506223320157-M:20110510142101283-)

     

    I ran MGADiag one extra time (without rebooting) since when the notification used to come before, it came on the second run.

    That's where the TTS error line changes.

    I also ran it twice before that (like after installing avast) and it didn't change then.
    EDIT: The non-genuine notification never came though.
    Tuesday, May 10, 2011 9:00 AM
  • "losererr" wrote in message news:bffe2a8e-5440-4d01-bd4b-115218893266...

    Phew...

    1) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    2) Uninstall Avast
    3) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    4) run Avast cleanup tool- Avast cleanup tool says it won't uninstall itself because the "Avast self protection module" is enabled. Therefore, I reboot.
    5) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    6) reboot
    7) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    8) reboot again
    9) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    10) reboot again
    11) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    12) reinstall Avast (do not update or reboot yet, even if it asks to)
    13) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    14) reboot

    It's 10th of May now.

    15) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    16) update Avast
    17) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    18) reboot
    19) run MGADiag (TTS Error: K:20110506223320157-M:20110509022233046-)
    20) run MGADiag (TTS Error: K:20110506223320157-M:20110510142101283-)

     

    I ran MGADiag one extra time (without rebooting) since when the notification used to come before, it came on the second run.

    That's where the TTS error line changes.


    Yeouch! - that is just plain weird!
    I'm gonna have to think about this - maybe Darin will have some input (please?<g>)

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, May 10, 2011 9:25 AM
    Moderator
  • "losererr" wrote in message news:bffe2a8e-5440-4d01-bd4b-115218893266...

    Phew...

    I ran MGADiag one extra time (without rebooting) since when the notification used to come before, it came on the second run.

    That's where the TTS error line changes.


    Thanks again for persisting with this - it's got my back up now :)
     
    While I'm thinking (and trying to repro the problem in  a VM), you may want to try posting in one of the Avast forums http://forum.avast.com/ to see if it's come back to haunt them yet - feel free to link to this thread or quote me.
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, May 10, 2011 1:28 PM
    Moderator
  • I did post it in the avast forums, here: http://forum.avast.com/index.php?topic=77625.0

    Nothing useful, really .

    I have also submitted a report in their support section (support.avast.com) which hasn't seen a reply either.

    Tuesday, May 10, 2011 3:47 PM
  • "losererr" wrote in message news:0f617129-9bae-4916-85c9-8b8ff7fa63ca...

    I did post it in the avast forums, here: http://forum.avast.com/index.php?topic=77625.0

    Nothing useful, really .

    I have also submitted a report in their support section (support.avast.com) which hasn't seen a reply either.


    :) - they should know more about what's causing this than I would.
    I've started pointing everyone towards the Avast forums, so hopefully it'll spur some action.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, May 10, 2011 3:54 PM
    Moderator
  • Yeah. Right now I'm looking at an alternate AV solution.

    Will uninstalling avast completely fix the problem or not, because the error line was still there when avast was uninstalled.

    Wednesday, May 11, 2011 8:07 AM
  • "losererr" wrote in message news:903d3551-c30b-432c-bd72-f704a2e79a11...

    Yeah. Right now I'm looking at an alternate AV solution.

    Will uninstalling avast completely fix the problem or not, because the error line was still there when avast was uninstalled.


    The TTS error displayed doesn't go away - but it doesn't update, which means that the problem is not being seen any more..
    MSE is pretty good - and is my current favourite freebie :)

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, May 11, 2011 8:38 AM
    Moderator
  • Pavel Pletanek
    Posted On: 11.05.2011 15:44

    Hello,

    this issue has been investigated by our development team but it does not seem to be reproducible on our reference computers, you may encounter these errors - usually "Windows Vista Error 0XC004D401: The security processor reported a system file mismatch error." or "Windows Vista Error 0x80080250: Unrecognized error.", or "An unauthorized change was made to your license." - if there's a third party program incompatible with Windows Vista installed in your computer, or when the virus scanner deletes (or prevents them from being initialized during the Windows boot) some software tools used to bypass Windows Product Activation (WPA). Please note that avast! 6 is fully compatible with all supported operating systems (requires MS Windows XP Service Pack 2 or higher). It means that avast! antivirus can be installed in any computer running supported operating system with no negative impact on its functionality and that all features included in avast! antivirus are fully functional in this environment.
    To troubleshoot the problem and resolve the error messages, you need to perform the following steps:
    1: make sure you're running Windows Vista with Service Pack 2 (SP2) as mentioned in Microsoft KB Article 931276 (http://support.microsoft.com/kb/931276/en-us)
    2: Uninstall any program that is incompatible with Windows Vista from your system:
    - reboot your computer
    - press F8 before Windows Vista starts loading to display the Advanced Boot Options screen (see e.g. http://www.bleepingcomputer.com/tutorials/tutorial61.html fore more details), then use the arrow keys to scroll down and select the Safe mode option, and then press Enter.
    - after Windows Vista loads in Safe mode, click Start menu, and then type appwiz.cpl in the Start Search box.
    - in the Programs list, select appwiz.cpl.
    - scroll down the list to identify all incompatible programs installed on your Vista computer.
    - select each program one by one and uninstall them from the computer.
    - after you are done, restart your computer in normal mode.
    3: Validate your Windows Vista
    - open the following Microsoft Website:
    http://www.microsoft.com/genuine/
    - click the Validate Windows button to validate your Vista operating system.
    4: use the Microsoft Genuine Advantage Diagnostic Tool (http://go.microsoft.com/fwlink/?linkid=52012) to determine the exact type of this error.
    5: if you are still unable to resolve the problem, you may refer to Microsoft forums for a possible solution.

    Kind Regards,

    Pavel Pletanek
    2nd Level Technical Support
    AVAST Software a.s.

    I am no longer using avast, but here's the reply from support.avast.com, in case its useful for other users.


    Saturday, May 14, 2011 2:31 AM
  • "losererr" wrote in message news:8643df54-95ae-4fbe-a5f1-f4890f3d3f93...

    Pavel Pletanek
    Posted On: 11.05.2011 15:44

    <snip>

      2: Uninstall any program that is incompatible with Windows Vista from your system:
          - reboot your computer
          - press F8 before Windows Vista starts loading to display the Advanced Boot Options screen (see e.g. http://www.bleepingcomputer.com/tutorials/tutorial61.html fore more details), then use the arrow keys to scroll down and select the Safe mode option, and then press Enter.
          - after Windows Vista loads in Safe mode, click Start menu, and then type appwiz.cpl in the Start Search box.
          - in the Programs list, select appwiz.cpl.
          - scroll down the list to identify all incompatible programs installed on your Vista computer.
          - select each program one by one and uninstall them from the computer.
    <snip>

    I am no longer using avast, but here's the reply from support.avast.com, in case its useful for other users.

     
    Thanks for that -except it's rubbish!
    The Windows Installer service cannot be started in Safe Mode - so nothing that uses it can be un/installed in Safe Mode. 
    If that's an example of their in-house testing, I think I can refrain from using Avast for a while longer :)

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, May 14, 2011 11:12 AM
    Moderator