locked
after windows update - an unauthorized change was made!! can not use my pc... RRS feed

  • Question

  •  

    Please help....can not use my pc after installing windows vista updates..I bought my pc from Dell about 3 months ago..here is the diagnostics report..

     

    Diagnostic Report (1.7.0069.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Online Validation Code: 0x80070426
    Cached Validation Code: N/A, hr = 0x80070426
    Windows Product Key: *****-*****-F4GJK-KG77H-B9HD2
    Windows Product Key Hash: iJAth4TbScMi8HdcPurlASXdEkw=
    Windows Product ID: 89578-OEM-7332157-00204
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6000.2.00010300.0.0.003
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {501449EA-8A3B-4ADB-9D33-FAE6F83241BD}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.69.2
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.071023-1545
    TTS Error: M:20080410230150112-
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    OGA Version: Registered, 1.6.28.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\dnsapi.dll[6.0.6000.16615]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{501449EA-8A3B-4ADB-9D33-FAE6F83241BD}</UGUID><Version>1.7.0069.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-B9HD2</PKey><PID>89578-OEM-7332157-00204</PID><PIDType>2</PIDType><SID>S-1-5-21-1054655228-2837412437-4158946865</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1720                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A04</Version><SMBIOSVersion major="2" minor="4"/><Date>20071105000000.000000+000</Date></BIOS><HWID>FA303507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M08    </OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90280409-6000-11D3-8CFE-0050048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office XP Professional with FrontPage</Name><Ver>10</Ver><Val>39476F84C4B4004</Val><Hash>4iCnywwNW1w4s9ukTIwGMGxyGic=</Hash><Pid>54185-640-0000025-17848</Pid><PidType>14</PidType></Product></Products></Office></Software></GenuineResults> 

    Spsys.log Content: U1BMRwEAAAAAAQAABAAAAEcOAAAAAAAAYWECANPwh6U2I9bTdpvIAdArSr9MLECc5R83cvYPeMyuoXyOp6W00hfOoNfPJahb3ar/1aCuRK5DbiMIQcUjh/mA2FF124VnPMn56Nv0G9HP2HddQjEu55dCox1MWGSJGD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2ImHkFGGR5j2BWyOcad6J+yR0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMUDf++I8FAzO5R/WvVmDnOkjbnreF0L13la6DtiLr35H5gNhRdduFZzzJ+ejb9BvR3dugHEerGZ2zjO3W+PxP6Rg/Ne0vArtR1JRjR1RQS05dAaUbA+g8LcegJ8cxFNiJh5BRhkeY9gVsjnGneifskdJzGrd/PyI/Fr8JTdC0e9OifwHVD+C98Itpvxov/asjO1HJpikHVzmDbKnLuATS2zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zA3fYw/kGg+/lEeP5ZfU55A2Ey4WbxJluMxfX3yMuB/q+YDYUXXbhWc8yfno2/Qb0d3boBxHqxmds4zt1vj8T+kYPzXtLwK7UdSUY0dUUEtOXQGlGwPoPC3HoCfHMRTYiYeQUYZHmPYFbI5xp3on7JHScxq3fz8iPxa/CU3QtHvTon8B1Q/gvfCLab8aL/2rIztRyaYpB1c5g2ypy7gE0tszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMxndJDMQJ6lld5d8SZjJlIpFR7msvATDGB73NpmMpD7sfmA2FF124VnPMn56Nv0G9Hd26AcR6sZnbOM7db4/E/pGD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2ImHkFGGR5j2BWyOcad6J+yR0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMWFo8c5f1xqAR+r62as8d4E+ZknZ0cWmN7E+cwtho4Br5gNhRdduFZzzJ+ejb9BvR3dugHEerGZ2zjO3W+PxP6Rg/Ne0vArtR1JRjR1RQS05dAaUbA+g8LcegJ8cxFNiJh5BRhkeY9gVsjnGneifskdJzGrd/PyI/Fr8JTdC0e9OifwHVD+C98Itpvxov/asjO1HJpikHVzmDbKnLuATS2zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zAPJDKCerLAOGsA47zHW/zFmZCUDak+0lZ7bnBblX5RK+YDYUXXbhWc8yfno2/Qb0d3boBxHqxmds4zt1vj8T+kYPzXtLwK7UdSUY0dUUEtOXQGlGwPoPC3HoCfHMRTYiYeQUYZHmPYFbI5xp3on7JHScxq3fz8iPxa/CU3QtHvTon8B1Q/gvfCLab8aL/2rIztRyaYpB1c5g2ypy7gE0tszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMwcnH5aPD8lM/e9HTNuvrfZfkmL+I6EuP2Tmhbmf4x6YvmA2FF124VnPMn56Nv0G9GNZnK2UNEQo7AFX9oIOgrJGD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2ImHkFGGR5j2BWyOcad6J+yR0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMx4YUfOOotGSTK7Ta/06tTxrCctB/ArHRx9Rq748SZe75gNhRdduFZzzJ+ejb9BvRQb0QAX/6YDk+kQr1E+35KRg/Ne0vArtR1JRjR1RQS05dAaUbA+g8LcegJ8cxFNiJh5BRhkeY9gVsjnGneifskdJzGrd/PyI/Fr8JTdC0e9OifwHVD+C98Itpvxov/asjO1HJpikHVzmDbKnLuATS2zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zGQlOzIdpnTQipGEKk8TaxmkxU6P3oFM1gsjQqBKfRMt+YDYUXXbhWc8yfno2/Qb0URdbDHXUl2SpX+YCPeHWN4YPzXtLwK7UdSUY0dUUEtOXQGlGwPoPC3HoCfHMRTYiYeQUYZHmPYFbI5xp3on7JHScxq3fz8iPxa/CU3QtHvTon8B1Q/gvfCLab8aL/2rIztRyaYpB1c5g2ypy7gE0tszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMyRk1vi6UYbqkv94MO17F8JFxAWes8yuA/kN115wtxAnPmA2FF124VnPMn56Nv0G9EBF1QnsPYnAfUyBWi/NkH9GD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2ImHkFGGR5j2BWyOcad6J+yR0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAw=

     

    Friday, April 11, 2008 3:59 AM

Answers

  • No, the URLs provided by kdub consulting are to resolve an "In Memory Mod-Auth" tamper issue.  In Memory Mod-Auth tamper issues are caused by an Incompatible Program attempting to shim/hoot  a critical system file, in system memory

     

     

      If you look at birkanb's Diagnostic Report, you will notice that critical system file dnsapi.dll is listed as Mismatched. That means the file has either been modified or has become corrupted. This is known as an "On Disk" Mod-Auth tamper (because the modification of the critical system file occured on the hard drive vs. in system memory).

     

      To resolve a "On Disk" Mod-Auth tamper,  we need to either repair or replace the Modified/Corrupt file with a known good copy. Normally, I do this by having the the user re-install a past Windows Update that contains a copy of the file.  

     

      Unfortunately, I know of no updates that contain a copy of dnsapi.dll. So the only suggestions I can provide are to:

     

    a) Re-install Vista using the Windows Restore software that came with your computer. The software may have been provided on a CD/DVD or on a partition on the computer's hard drive. Please see the documentation that came with the computer (or contact the computer's manufacturer) for assistance in conducting the Windows Restore process.

     

    b) Go to http://support.microsoft.com for additional Vista support options. Even though the result is that Vista's anti-piracy systems have put Vista into a tamper state, the core issue is that a critical system file has been changed  and, most likely, is non-functional. My hope is that Vista support can provide you with a better option then to re-install.

     

    Thank you,

    Darin Smith

    WGA Forum Manager

    Friday, April 11, 2008 7:06 PM

All replies

  • Maybe read these?

    http://support.microsoft.com/kb/931699

    http://www.5starsupport.com/vista-faq/vista-troubleshooting.htm#license-change

    Hope these help..
    Friday, April 11, 2008 6:39 PM
  • No, the URLs provided by kdub consulting are to resolve an "In Memory Mod-Auth" tamper issue.  In Memory Mod-Auth tamper issues are caused by an Incompatible Program attempting to shim/hoot  a critical system file, in system memory

     

     

      If you look at birkanb's Diagnostic Report, you will notice that critical system file dnsapi.dll is listed as Mismatched. That means the file has either been modified or has become corrupted. This is known as an "On Disk" Mod-Auth tamper (because the modification of the critical system file occured on the hard drive vs. in system memory).

     

      To resolve a "On Disk" Mod-Auth tamper,  we need to either repair or replace the Modified/Corrupt file with a known good copy. Normally, I do this by having the the user re-install a past Windows Update that contains a copy of the file.  

     

      Unfortunately, I know of no updates that contain a copy of dnsapi.dll. So the only suggestions I can provide are to:

     

    a) Re-install Vista using the Windows Restore software that came with your computer. The software may have been provided on a CD/DVD or on a partition on the computer's hard drive. Please see the documentation that came with the computer (or contact the computer's manufacturer) for assistance in conducting the Windows Restore process.

     

    b) Go to http://support.microsoft.com for additional Vista support options. Even though the result is that Vista's anti-piracy systems have put Vista into a tamper state, the core issue is that a critical system file has been changed  and, most likely, is non-functional. My hope is that Vista support can provide you with a better option then to re-install.

     

    Thank you,

    Darin Smith

    WGA Forum Manager

    Friday, April 11, 2008 7:06 PM