none
An unauthourised change has been made to windows

    Question

  • Hi there,

    I am having a lot of trouble running the diagnostic tool as i get a pop up with an error code. I have limited control over my laptop. I can't copy when in safe mode either. I have taken some pictures and am willing to do anything to reolve this problem. I have a Acer aspire 4315 laptop with vista home sp1 pre installed. I did notice that the product key showing in the report isn't the same key as i have on the coa certicate on my laptop. It's strange as i have attempted this a number of times and mostly it shows invalid however it has showed as being genuine on a few occasions. Thanks in advance

    Wednesday, August 11, 2010 4:37 PM

Answers

  • Hello help_mepls,

     The core of your issue centers on the line in your Diagnostic Report that reads:

    File Scan Data-->
    File Mismatch: C:\Windows\system32\rpcrt4.dll[6.0.6000.16850], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\wtsapi32.dll[6.0.6000.16553], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\msasn1.dll[6.0.6000.16922], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\atl.dll[3.5.2284.2], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\efsadu.dll[Hr = 0x80070002]

     

    This means the file(s) has been Tampered, Modified or has become Corrupt. Vista see this as an attack to bypass it's Licensing security.

    To resolve the issue, you need to either repair file .

    First try repairing Windows using System Restore:

    1)    Reboot Vista into Safe Mode

    2)    Click the ‘Start’ button

    3)    In the Start Search field, type: System Restore and hit “Enter” keyboard key

    4)    Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.

    5)    Click the "Next" button.

    6)    Reboot back into Normal mode

    7)    Vista should no longer be in Reduced Functionality mode

     

    If that doesn't work, we'll try doing a System Scan. The scan will look for bad Vista files and will attempt to repair them, if possible.

    1)    Login to Vista in Normal Mode (not safe mode)

    2)    Launch an Internet Browser

    3)    Type: %windir%\system32\ in the browser's address field

    4)    Scroll down till you find the file cmd.exe

    5)    Right-click the file and select 'Run as Administrator'

    6)    In the CMD window, type: sfc /scannow

    7)    Reboot twice and see if that resolves the issue.

    If neither of these sets of steps resolves the issue, my only other suggestions would be either to contact Vista support at http://support.microsoft.com/gp/contactwga or reinstall Vista.

    Thank you,


    Darin MS
    Wednesday, August 11, 2010 7:12 PM
    Owner

All replies

  • Hi there,

    I am having a lot of trouble running the diagnostic tool as i get a pop up with an error code. I have limited control over my laptop. I can't copy when in safe mode either. I have taken some pictures and am willing to do anything to reolve this problem. I have a Acer aspire 4315 laptop with vista home sp1 pre installed. I did notice that the product key showing in the report isn't the same key as i have on the coa certicate on my laptop. It's strange as i have attempted this a number of times and mostly it shows invalid however it has showed as being genuine on a few occasions. Thanks in advance


    Hope you have run full malware scans on your computer with different scanners including whatever you currently have as an anti-virus on your system.  I use Malwarebytes, SpyBot Search & Destroy and Trend Micro housecall (all download & run for free) to check the status of the computer before anything else.  With the issues you are describing it really looks like you may be infected.  Once you get a clean report back for each of those products then attempt to rerun the MGA Diagnostics report.  Any error codes then, please post them exactly.
    Wednesday, August 11, 2010 5:15 PM
  • I have no anti virus as i removed Norton which was pre installed on the laptop. After many failed attempts to put another anti virus on the laptop i am left without one. I did manage to do windows onelive care system scan but it came back clean.

     

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0x80070426
    Windows Product Key: *****-*****-Q9CM8-KTDKK-8QXTR
    Windows Product Key Hash: OI3PQUp2nK/Ysh5U6MY15ORIfio=
    Windows Product ID: 89572-OEM-7332166-00029
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6000.2.00010300.0.0.002
    ID: {20A8CE89-DB7C-4958-9E83-1218AD177628}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.100218-0019
    TTS Error: M:20100811183327947-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 102
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\rpcrt4.dll[6.0.6000.16850], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\wtsapi32.dll[6.0.6000.16553], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\msasn1.dll[6.0.6000.16922], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\atl.dll[3.5.2284.2], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\efsadu.dll[Hr = 0x80070002]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{20A8CE89-DB7C-4958-9E83-1218AD177628}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6000.2.00010300.0.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-8QXTR</PKey><PID>89572-OEM-7332166-00029</PID><PIDType>2</PIDType><SID>S-1-5-21-1441777669-3995908577-2047004987</SID><SYSTEM><Manufacturer>Acer           </Manufacturer><Model>Aspire 4315                    </Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>V1.04          </Version><SMBIOSVersion major="2" minor="4"/><Date>20070905000000.000000+000</Date></BIOS><HWID>EC313507018400EA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software Licensing service is not running.

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: NgAAAAEABAABAAIAAQAAAAAAAwABAAEAnJ/wV5guQHpEnvyQRoOqkYJqcHXy9DRe/B+sVrIN

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   PTLTD     APIC 
      FACP   INTEL   CRESTLNE
      HPET   INTEL   CRESTLNE
      BOOT   PTLTD   $SBFTBL$
      MCFG   INTEL   CRESTLNE
      TCPA   Intel    CRESTLN
      TMOR   PTLTD          
      SLIC   ACRSYS  ACRPRDCT
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri
      SSDT   SataRe  SataPri

     

    Wednesday, August 11, 2010 6:14 PM
  • Hello help_mepls,

     The core of your issue centers on the line in your Diagnostic Report that reads:

    File Scan Data-->
    File Mismatch: C:\Windows\system32\rpcrt4.dll[6.0.6000.16850], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\wtsapi32.dll[6.0.6000.16553], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\msasn1.dll[6.0.6000.16922], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\atl.dll[3.5.2284.2], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\efsadu.dll[Hr = 0x80070002]

     

    This means the file(s) has been Tampered, Modified or has become Corrupt. Vista see this as an attack to bypass it's Licensing security.

    To resolve the issue, you need to either repair file .

    First try repairing Windows using System Restore:

    1)    Reboot Vista into Safe Mode

    2)    Click the ‘Start’ button

    3)    In the Start Search field, type: System Restore and hit “Enter” keyboard key

    4)    Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.

    5)    Click the "Next" button.

    6)    Reboot back into Normal mode

    7)    Vista should no longer be in Reduced Functionality mode

     

    If that doesn't work, we'll try doing a System Scan. The scan will look for bad Vista files and will attempt to repair them, if possible.

    1)    Login to Vista in Normal Mode (not safe mode)

    2)    Launch an Internet Browser

    3)    Type: %windir%\system32\ in the browser's address field

    4)    Scroll down till you find the file cmd.exe

    5)    Right-click the file and select 'Run as Administrator'

    6)    In the CMD window, type: sfc /scannow

    7)    Reboot twice and see if that resolves the issue.

    If neither of these sets of steps resolves the issue, my only other suggestions would be either to contact Vista support at http://support.microsoft.com/gp/contactwga or reinstall Vista.

    Thank you,


    Darin MS
    Wednesday, August 11, 2010 7:12 PM
    Owner
  • I have no anti virus as i removed Norton which was pre installed on the laptop. After many failed attempts to put another anti virus on the laptop i am left without one. I did manage to do windows onelive care system scan but it came back clean.


    See the importance of the scan.  Thanks for posting it.  Your initial post lead me to believe that there is other things wrong than just a non-genuine or invalid issue. 
     
    Once you have completed Darin's suggestions, if you are successful in getting control of the system, I suggest that you also run the anti-malware programs I suggested.  One anti-virus program may not find all the nasty things that may have been installed to a computer with no anti-virus software.  I also recommend that you run them in safe mode (keep pressing the F8 key immediately after the computer's monitor comes up on a reboot.  Don't worry about beeps from the computer during that time (it only means that the keyboard buffer is full which is OK.)
    Wednesday, August 11, 2010 8:18 PM
  • "LVTravel" wrote in message news:43b3c158-cbe6-4614-9d9b-7ce8484fda76...

    I have no anti virus as i removed Norton which was pre installed on the laptop. After many failed attempts to put another anti virus on the laptop i am left without one. I did manage to do windows onelive care system scan but it came back clean.


    See the importance of the scan.  Thanks for posting it.  Your initial post lead me to believe that there is other things wrong than just a non-genuine or invalid issue. 
     
    Once you have completed Darin's suggestions, if you are successful in getting control of the system, I suggest that you also run the anti-malware programs I suggested.  One anti-virus program may not find all the nasty things that may have been installed to a computer with no anti-virus software.  I also recommend that you run them in safe mode (keep pressing the F8 key immediately after the computer's monitor comes up on a reboot.  Don't worry about beeps from the computer during that time (it only means that the keyboard buffer is full which is OK.)

    When Norton has been on the system in ANY form - it's necessary to run the Norton Removal Tool to get rid of (most of) the last traces, and get the system settings back where they should be.
    The fact that you haven't done this is probably what's caused your inability to install another AV.
    You should also run the removal tools for all the other AV's you've attempted to install, as botched installs can leave stuff behind that also prevents other programs installing.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, August 12, 2010 1:13 AM
    Moderator
  • Thank you all for your posts. I am now running xp as I failed in every effort to correct it. I thought I'd explain everything that happend and hopefully help you help others. Also wanted to explain thart I didn't just make a thread as my 1st attempt to gain help. I have been reading other threads and your advice before I made my thread. I don't actually know how I managed to post my diagnostic report as I couldn't click the copy button as I would get a pop up preventing me from copying and pasting into the forums. I then took a screen print of the diagnostic report then tried pasting my screen print using Word. I could see the screen print in word but my system won't allow me to save as it was in safemode or whatever.  I kept the word page open and tried pasting the screen print into my post but some how it looked like my diagnostic report had actually worked but it's a little messed up at the bottom but this is obviously why as I did it the way I did. Just thought maybe my method would work for others that are also experiencing the problem in actually getting a report.

    I had already done all the steps suggested above. I removed Norton as an attempt to correct things. As I originally thought windows was causing all my problems as they think my system isn't legit.

    This is what happend...... my friend was on facebook (her laptop) and she tried playing a game and needed to install something so she clicked on it. She said then there was a problem which took her to windows update which then resulted in her system going crazy. Looking through files which I have seen that windows detected a memory error or something and cannot resolve the issue.

    When i first had the laptop of her I couldn't do anything,control panel was hidden or if i clicked on it a black screen would flash very very fast and that is what happend when I tried any confiqaration. I do remember one message I would get at start up in a command prompt screen which said 'bad image.exe'. Also had a normal windows message which looked genuine which said 'windows aero has stopped working' or something similar followed by it looks like you have been a victim of software piracy. I managed to finally get that sorted by using the windows 'fixit' tool from Microsost. I done that and It worked.

    My next attempt was to remove Norton as I hate it and would never recommend it to anyone. Very foolish step even though it wasn't working and that also seemed to be locked like the firewall and everything else. Now I was left with no Antivirus. After reading through posts on here I read the thing about Norton removal tool which was unknown to me. I sucsessfully managed to download that even though mbam,sas and Avast wouldn't download or if they did download it wouldnt allow me to install them as at the end of installing i'd get a pop up error. SAS portable worked but was a waste of time as it found two things which said would be removed after reboot but still had the problems. Norton may have been the reason which brought me to the' unauthourised change has been made to windows' but I'm not sure as like you explained in your posts about Tamperd files of product key. I strongly believe this is what caused the limited functionality which takes you to a window validation page.

    I had been googling info for days then on here reading for a while before making this thread. My final attempt was making a post here,even though I was expecting much help because I knew I couldn't post the Diagnostic report as I had already tried many times to click the copy button.

    Now I am being honest here so close your ears if you rather not know how i got a valid edition of xp and more importantly a valid key. Well put it this way I came across it on a torrent forum. I don't like these forums and don't normally download software e.t.c but this is what this problem is leading to out of desperation.

    I wasn't to sure if I would be able to install xp over vista so due to this screwed up vista edition which don't supply users with original discs. Anyway I got to partition part and i had a PQservice partition a C: Acer partition and a  D: Partition . I clicked on the D: one then computer rebooted after install and shock horror it happend the very thing that I thought would happen. I had a black screen with a flashing cursor saying something about read write error and told me to press control alt and delete to retry. So I am now left with no vista or xp or access to help. I tried again this time I used the C: partition. I know I should of formatted it first but I was a bit scared after the screen with the flashing cursor. I installed windows leaving the current file system intact. Managed to install and start xp but still get problems with downloading certain exe files. Managed to get Superantivirus downloaded and run it. This is what I think could of been the problem with downloading with the vista which I have never come across before. Superantivirus found 'systemfile.broken' or could be 'systembroken.file' it was words to that effect which goggle came up with lots of links and apparently something about a virus attack or after vista has been removed. Anyway decide to take the plunge and completely format C: and D: partitions and try again. Hurrah the product key worked and I had a full working system.

    I have worked with computers before and never came across something like this and my heart goes out to all those who are also in the same situation that I was faced with. not knowing what to do next apart from fork out a lot of money in the repair shop. This is Vista's problem and all these people facing this problem should have full vista disc's sent to them free of charge or they need to get an uopdate out to prevent further users getting hit by this.

    I know you guys are doing all you can with help but some users I noticed are getting their knickers in a twist after all suggestions are failing.

    Sorry about all the little moans about Vista but they are increasing software piracy not decreasing it. 

    Also noticed noticed some helpers here are a lot more patient and more helpful than others. I can understand you get sick of saying the same thing time and time again but I did appreciate some responses a lot more than others and thank you for taking the time for alternative attempts even if they didn't work. This is why I have taken the time to explain everything i did, happend, resulted in. Maybe none of my info above has helped in anyway but the thing with 'printscreen is definitley something you could suggest as it did the trick for me.

    Thanks again

    Debbie

    (Swansea, u.k)

     

    Friday, August 13, 2010 11:10 AM
  • Hi there,

    I am having a lot of trouble running the diagnostic tool as i get a pop up with an error code. I have limited control over my laptop. I can't copy when in safe mode either. I have taken some pictures and am willing to do anything to reolve this problem. I have a Acer aspire 4315 laptop with vista home sp1 pre installed. I did notice that the product key showing in the report isn't the same key as i have on the coa certicate on my laptop. It's strange as i have attempted this a number of times and mostly it shows invalid however it has showed as being genuine on a few occasions. Thanks in advance


    Hope you have run full malware scans on your computer with different scanners including whatever you currently have as an anti-virus on your system.  I use Malwarebytes, SpyBot Search & Destroy and Trend Micro housecall (all download & run for free) to check the status of the computer before anything else.  With the issues you are describing it really looks like you may be infected.  Once you get a clean report back for each of those products then attempt to rerun the MGA Diagnostics report.  Any error codes then, please post them exactly.
     What is that link within your post? I thought it linked to one of my previous posts but it opened my outlook express folder then told me it cannot open the link as it's not a valid file format.
    Friday, August 13, 2010 11:23 AM
  • "help_mepls" wrote in message news:0e15241c-a2aa-40a1-87f2-725770f0f1c6...

     What is that link within your post? I thought it linked to one of my previous posts but it opened my outlook express folder then told me it cannot open the link as it's not a valid file format.


    The link is one that the Forums create when the reader is using a Newsgroup reader to access the forum, rather than the normal web access.
    It does link to this thread - in fact to your post - but you have to be a little devious to be able to use it.
    The @communitybridge.codeplex .com just tells us that LVTravel is using one of the common NNTP Bridges (MS created one, and a coupe of others are in existence.
    The 0e15241c-a2aa-40a1-87f2-725770f0f1c6 is the thread identifier - which in the case of at least two of the Bridges (including the MS one), is provided by the MS Server, and is unique to the post.
    If you go to the index page for this forum - http://social.microsoft.com/Forums/en-US/genuinewindows7/threads - and click on any of the threads, you'll see a similar identifer.
    This thread for instance is
     
    If you now go back to the index page, and add the identifier to the end of the link, you get....
    which will (or at leasr should) bring up the correct thread.
     
    Note that this only happens with some of the  NNTP Bridges  - and only if the newsreader is set to reply in this manner (many aren't)
    For more information on the MS Communities NNTP Bridge - look here....
     
     
     
    HTH?
     
    0e15241c-a2aa-40a1-87f2-725770f0f1c6
    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, August 13, 2010 1:25 PM
    Moderator
  • "help_mepls" wrote in message news:0e15241c-a2aa-40a 1-87f2-725770f0f1c6...

    <FO NT face=Arial> What is that link within your post? I thought it linked to one of my previous posts but it opened my outlook express folder then told me it cannot open the link as it's not a valid file format.


    The link is one that the Forums create when the reader is using a Newsgroup reader to access the forum, rather than the normal web access.
    It does link to this thread - in fact to your post - but you have to be a little devious to be able to use it.
    The @communitybridge.codeplex .com just tells us that LVTravel is using one of the common NNTP Bridges (MS created one, and a coupe of others are in existence.
    The 0e15241c-a2aa-40a1-87f2-725770f0f1c6 is the thread identifier - which in the case of at least two of the Bridges (including the MS one), is provided by the MS Server, and is unique to the post.
    If you go to the index page for this forum - http://social.microsoft.com/Forums/en-US/genuinewindows7/threads&nbs p;- and click on any of the threads, you'll see a similar identifer.
    This thread for instance is
     
    If you now go back to the index page, and add the identifier to the end of the link, you get....
    which will (or at leasr should) bring up the correct thread.
     
    Note that this only happens with some of the  NNTP Bridges  - and only if the newsreader is set to reply in this manner (many aren't)
    For more information on the MS Communities NNTP Bridge - look here....
     
     
     
    HTH?
     
    0e15241c-a2aa-40a1-87f2-725770f0f1c6
    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Yep, as Noel stated, I use Windows Live Mail and the Communities NNTP bridge to access all of the Answers Forums, as well as Microsoft Genuine and Technet that I respond in.  It is a lot easier for me to see 25 different forums in my newsreader at the same time than going to each of the forums one at a time and trying to see what I have and haven't answered.  There are some issues but it is a lot better in my opinion than the forum interface.
    Friday, August 13, 2010 4:51 PM
  • oh right, thanks for that.  It has definitley been a learning experience here. Thanks to all
    Sunday, August 15, 2010 9:42 AM
  • "help_mepls" wrote in message news:e001bd69-3ebf-4755-af68-8578ed235b5d...
    oh right, thanks for that.  It has definitley been a learning experience here. Thanks to all

    Glad to help :)
    Good luck!

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, August 15, 2010 9:52 AM
    Moderator