locked
Windows 7 SP1 update makes an "unauthorized change to windows". Reinstall necessary? RRS feed

  • Question

  • I just installed Windows 7 (A retail copy bought after I had my computer).  I also installed a few drivers (nvidia graphics), some stress testing tools (Nvidia tech demos to run along side prime95), Google Chrome, and some utilities from CPUID to watch temperatures. But nothing else was installed except for windows updates.

    When I got to the SP1 update, it installed and told me I had to restart to finish installing it. I postponed it and a few minutes later a dialog box popped up telling me that unauthorized changes were made to windows core components (or something to that effect) and that I need to reinstall.

    I restarted my computer at that time.

    And now everything seems to work. For now. I used the online validation tool at http://www.microsoft.com/genuine/validate/ and it says I have no problems. The 'System' control panel from Computer->Properties says "Windows is activated" at the bottom along with a product ID.

    The Microsoft Genuine Advantage Diagnostic Tool tells me this information which I don't entirely know how to interpret, but I think it looks ok:

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-*****-*****-KJ8VK <I modified this line to show less of my key. -drobb2>

    Windows Product Key Hash: vp3ZmtomhhogVUX/9O+XT1sAQVc=

    Windows Product ID: 00371-152-5931703-85315

    Windows Product ID Type: 5

    Windows License Type: Retail

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {381D39EE-7C09-4D54-9B48-2B70F5B6F021}(1)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Professional

    Architecture: 0x00000009

    Build lab: 7601.win7sp1_gdr.110622-1506

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Users\Dustin\AppData\Local\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{381D39EE-7C09-4D54-9B48-2B70F5B6F021}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-KJ8VK</PKey><PID>00371-152-5931703-85315</PID><PIDType>5</PIDType><SID>S-1-5-21-3631311770-1475722202-2692971517</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0301</Version><SMBIOSVersion major="2" minor="6"/><Date>20110916000000.000000+000</Date></BIOS><HWID>92BA3607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

     

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, RETAIL channel

    Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00170-152-593170-01-1033-7601.0000-3452011

    Installation ID: 009564583805439181522085525664527083702896881956694161

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: KJ8VK

    License Status: Licensed

    Remaining Windows rearm count: 3

    Trusted time: 12/11/2011 7:34:38 PM

     

    Windows Activation Technologies-->

    HrOffline: 0x00000000

    HrOnline: 0x00000000

    HealthStatus: 0x0000000000000000

    Event Time Stamp: 12:11:2011 19:39

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

     

     

    HWID Data-->

    HWID Hash Current: LgAAAAEAAgABAAEAAAACAAAAAQABAAEAln0yRwQKfOkaXea+AmQUCLzi0Ikucw==

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes, but no SLIC table

    Windows marker version: N/A

    OEMID and OEMTableID Consistent: N/A

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC ALASKA A M I

      FACP ALASKA A M I

      HPET ALASKA A M I

      MCFG ALASKA A M I

      SSDT AMICPU PROC

     

     

     

    So is there any reason I might need to reinstall like the dialog box told me? Is anything potentially bad going to happen if i don't? When that dialog box popped up, did it set some flags anywhere or record something that will make Windows decide some time in the future that it isn't genuine?

    I've read this happens when windows detects a file is a version that it shouldn't be. Is it possible that the SP1 install somehow failed to update one of the files? Is there a way to verify SP1 installation?

     

    Monday, December 12, 2011 2:05 AM

Answers

  • "drobb2" wrote in message news:7b6fa30d-0b25-4f55-b275-3097158f354f...

    I just installed Windows 7 (A retail copy bought after I had my computer).  I also installed a few drivers (nvidia graphics), some stress testing tools (Nvidia tech demos to run along side prime95), Google Chrome, and some utilities from CPUID to watch temperatures. But nothing else was installed except for windows updates.

    When I got to the SP1 update, it installed and told me I had to restart to finish installing it. I postponed it and a few minutes later a dialog box popped up telling me that unauthorized changes were made to windows core components (or something to that effect) and that I need to reinstall.

    I restarted my computer at that time.

    And now everything seems to work. For now. I used the online validation tool at http://www.microsoft.com/genuine/validate/ and it says I have no problems. The 'System' control panel from Computer->Properties says "Windows is activated" at the bottom along with a product ID.

    The Microsoft Genuine Advantage Diagnostic Tool tells me this information which I don't entirely know how to interpret, but I think it looks ok:

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-*****-*****-KJ8VK <I modified this line to show less of my key. -drobb2>

    Windows Product Key Hash: vp3ZmtomhhogVUX/9O+XT1sAQVc=

    Windows Product ID: 00371-152-5931703-85315

    Windows Product ID Type: 5

    Windows License Type: Retail

    Windows OS version: 6.1.7601.2.00010100.1.0.048

     

     

    So is there any reason I might need to reinstall like the dialog box told me? Is anything potentially bad going to happen if i don't? When that dialog box popped up, did it set some flags anywhere or record something that will make Windows decide some time in the future that it isn't genuine?

    I've read this happens when windows detects a file is a version that it shouldn't be. Is it possible that the SP1 install somehow failed to update one of the files? Is there a way to verify SP1 installation?

     

     
    So long as the system no longer shows an non-genuine messages, you’re good to go – the problem arose because you delayed the reboot – and Windows happened to do a self-check at that time, and discovered version inconsistencies, which it interpreted as being attempts to evade activation, while it was in fact simply that the files concerned were pending update by the SP1 reboot.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Tuesday, December 13, 2011 12:09 AM
    Monday, December 12, 2011 10:37 AM
    Moderator

All replies

  • As a quick update, I found the System File Checker tool to verify my windows files are all the expected versions. I ran the tool and it told me "Windows Resource Protection did not find any integrity violations."

    This makes me feel more confident that I have nothing to worry about. For other people who might find this thread, you can run the System File Checker by opening up a command prompt as an administrator and using the command:

    sfc /scannow


    • Edited by drobb2 Monday, December 12, 2011 2:13 AM
    Monday, December 12, 2011 2:12 AM
  • The message you saw simply said that you needed to restart before changes could take place.  Windows will keep displaying that every ten minutes until you do.  There is nothing wrong with your system.  You are properly licensed.

    License Status: Licensed


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Monday, December 12, 2011 2:27 AM
    Answerer
  • Hi Colin,

    Thanks for responding. I did see the message telling me I need to restart before installation would be complete.  However that is not the dialog box I am concerned about. The dialog box in question looks like this:

     

    I don't want to sound rude, because I do appreciate you for trying to help, but I really don't think we're talking about the same dialog box. Note that it doesn't say windows needs to be restarted, it says it needs to be restored.

    As an update, I've found that further windows updates are failing to install, KB2572078 is continually 'Failed'. The "Troubleshoot problems with installing updates" is not helping, so I will reinstall windows now. I'm not sure if this is related to my problem earlier, but I'm spooked enough that I'm going to have issues down the road, so I will reinstall now before I install all my applications and software on my system.

     



    • Edited by drobb2 Monday, December 12, 2011 4:29 AM
    Monday, December 12, 2011 4:21 AM
  • You can always uninstall SP1 and reinstall.
    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Monday, December 12, 2011 4:40 AM
    Answerer
  • You can always uninstall and reinstall SP1.  However it is not an activation issue so this is probably a poor forum.  I suggest you ask in the Answers forums.  Try

    http://answers.microsoft.com/en-us/windows/forum/windows_install-windows_7?page=1&tab=all


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Monday, December 12, 2011 4:44 AM
    Answerer
  • "drobb2" wrote in message news:7b6fa30d-0b25-4f55-b275-3097158f354f...

    I just installed Windows 7 (A retail copy bought after I had my computer).  I also installed a few drivers (nvidia graphics), some stress testing tools (Nvidia tech demos to run along side prime95), Google Chrome, and some utilities from CPUID to watch temperatures. But nothing else was installed except for windows updates.

    When I got to the SP1 update, it installed and told me I had to restart to finish installing it. I postponed it and a few minutes later a dialog box popped up telling me that unauthorized changes were made to windows core components (or something to that effect) and that I need to reinstall.

    I restarted my computer at that time.

    And now everything seems to work. For now. I used the online validation tool at http://www.microsoft.com/genuine/validate/ and it says I have no problems. The 'System' control panel from Computer->Properties says "Windows is activated" at the bottom along with a product ID.

    The Microsoft Genuine Advantage Diagnostic Tool tells me this information which I don't entirely know how to interpret, but I think it looks ok:

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-*****-*****-KJ8VK <I modified this line to show less of my key. -drobb2>

    Windows Product Key Hash: vp3ZmtomhhogVUX/9O+XT1sAQVc=

    Windows Product ID: 00371-152-5931703-85315

    Windows Product ID Type: 5

    Windows License Type: Retail

    Windows OS version: 6.1.7601.2.00010100.1.0.048

     

     

    So is there any reason I might need to reinstall like the dialog box told me? Is anything potentially bad going to happen if i don't? When that dialog box popped up, did it set some flags anywhere or record something that will make Windows decide some time in the future that it isn't genuine?

    I've read this happens when windows detects a file is a version that it shouldn't be. Is it possible that the SP1 install somehow failed to update one of the files? Is there a way to verify SP1 installation?

     

     
    So long as the system no longer shows an non-genuine messages, you’re good to go – the problem arose because you delayed the reboot – and Windows happened to do a self-check at that time, and discovered version inconsistencies, which it interpreted as being attempts to evade activation, while it was in fact simply that the files concerned were pending update by the SP1 reboot.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Tuesday, December 13, 2011 12:09 AM
    Monday, December 12, 2011 10:37 AM
    Moderator