locked
Unauthorized change to windows RRS feed

  • Question

  • I just got home from work turned on the PC and got some crazy error, after searching thru the forums and help sections, i turn up here asking for help. I pretty much can not access any part of my PC other than web browser.

    Any help would make me thankful Smile

    Diagnostic Report (1.7.0069.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Online Validation Code: 0xc004d301
    Cached Validation Code: N/A, hr = 0xc004d301
    Windows Product Key: *****-*****-9H34F-26YCH-KVV26
    Windows Product Key Hash: yrf/CIi9hqz7FQlyHC2BIaTCDTo=
    Windows Product ID: 89583-023-1727594-71071
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.0.6000.2.00010300.0.0.003
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {7DB28C4C-15CB-40F8-837D-51205A6AEA19}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000009
    Build lab: 6000.vista_gdr.071023-1545
    TTS Error: T:20080311175108807-
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2920-80070002_025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{7DB28C4C-15CB-40F8-837D-51205A6AEA19}</UGUID><Version>1.7.0069.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-KVV26</PKey><PID>89583-023-1727594-71071</PID><PIDType>5</PIDType><SID>S-1-5-21-183936408-327372518-1376342001</SID><SYSTEM><Manufacturer>NVIDIA</Manufacturer><Model>122-CK-NF68</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="4"/><Date>20070112000000.000000+000</Date></BIOS><HWID>1A333507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults> 

    Spsys.log Content: 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


    Wednesday, March 12, 2008 1:30 AM

Answers

  • Hiya Darin. Thanks for your continued replies. I will be trying to isolate the problem sometime soon(if i ever get time enough to eat/sleep/work and spend time with family)

    I will keep it on manual updates tho after this point forward as the auto updates it seems that you suggest it installs things that i really dont need? and in theroy it can hurt the system(which is kinda dumb).

    if i do find out which update is causing the problems, i will report back, till then,

     thanks.
    Saturday, March 15, 2008 3:34 AM

All replies

  •  

    Hello sutex,

     

      Would you reboot and tell me if the issue continues?

     

    Thank you,

    Darin Smith

    WGA Forum Manager

    Wednesday, March 12, 2008 10:18 PM
  •  Darin Smith MS wrote:

     

    Hello sutex,

     

      Would you reboot and tell me if the issue continues?

     

    Thank you,

    Darin Smith

    WGA Forum Manager



    hi, no, i rebooted quite a few times last night to see if that helped, same error and only access to web browser. I even tried to get to safe mode and i could not.

    Im lost of what to do.

    I also got an email back from tech support and it pretty much seems that they never even read the email i sent to them from the answers i got back.

    Again lost of what to do.
    Thursday, March 13, 2008 3:35 AM
  • Hi Sutex,

     

      I've only worked on one other 0xc004d301 tamper issue before (and that user never responded after his first post). What I do know about this type of tamper is that it is very simillare to an In Memory Mod-Auth Tamper that are caused by Incompatible programs. 

     

      A 0xc004d301 tamper occures when a software tries to modify a specific areas of memory that are not supposed to be changed. In the past this was a way for programs to do some things, but it is no longer the way in Windows Vista.

     

      By the time Vista was available in the market there was some software that still did that. One example can be some device drivers (particularly those ones that were released right away for Vista).

     

      My Devs tell me that "Typically if the user reboots they will be asked to re-enter their product key and all will be good again", which is why I originally asked if the issue went away after reboot.

     

      Currently, I have my Devs coming up with troubleshooting steps/information gathering steps so we can get a better handle on the issue and, hopefully, resolve your issue ASAP.  Please standby.

     

    Thank you,

    Darin Smith

    WGA Forum Manager

     

    Thursday, March 13, 2008 8:23 PM
  • its working again now. A friend came over and got it into safe mode, then took it back a few restore points.

    When it booted up it did indeed ask for my product key and it went along smoothly.

    However, after i ran the windows update and installed updates, rebooted, it again gave me the same error and i was again left with web browser only access and the same error as before.

    So, he went over the whole safe mode thing again, rebooted, inserted product key, rebooted again to see if it would boot normally, it did.

    Windows Updated and rebooted, again, web browser only access again...so it must be something with some windows update file that does not like my system.

    I now have turned off auto updates which i dont like to do, but it looks like for the time been thats all i can do. Im not sure which update is giving me the problem and to be honest i dont want to try and find out Smile

    So, no updates for me if i want an OS that actully works 100%. Until now i have not had a single problem with this $240 product, but now if i cant update it its near useless to me.
    Friday, March 14, 2008 5:25 AM
  • Hello Sutex,

     

      Without knowing what update is causing the issue, there isn't any way for me to suggest a workaround. Since you know how to return to a restore point, I encourage you to install each update (one at a time) untill Vista experiances the issue. That update would be the cause and you could go back to a restore point and then set Windows Update to hide that particular update. 

     

      Microsoft does sometimes release 3rd party drivers and updates thru Windows Update and I have a feeling that is what is causing the issue. If it was a Microsoft update, that was causing the issue, I would be seeing more then just one person reporting the problem.  So, if you do not wish to try isolating the update that is causing the issue (as I suggested above) I believe it would still be safe for you to install, at least, Critical updates.

     

    Thank you,

    Darin Smith

    WGA Forum Manager

     

    Friday, March 14, 2008 9:30 PM
  • Hiya Darin. Thanks for your continued replies. I will be trying to isolate the problem sometime soon(if i ever get time enough to eat/sleep/work and spend time with family)

    I will keep it on manual updates tho after this point forward as the auto updates it seems that you suggest it installs things that i really dont need? and in theroy it can hurt the system(which is kinda dumb).

    if i do find out which update is causing the problems, i will report back, till then,

     thanks.
    Saturday, March 15, 2008 3:34 AM