locked
An Unauthorized Change Was Made to Windows RRS feed

  • Question

  • My Sony Vaio laptop is just shy of 1yr old. Last night after a reboot I started getting the "An Unauthorized change was made to Windows" error.

    On one reboot I got a different message, something about me not having the FULL resources of Vista (Aero, etc...). That instance since I finally had access to the START button I was able to pull up a cmd window and do the 'net start slvc' command. Once I did that and reran the Validate Windows the message this time was my copy 'MAY' not be valid, try again later. However, I've never been able to get access to a START button in non-safe mode and can't start the licensing service.

    Windows Vista Genuine Validation Report:
    This copy of Windows did not pass genuine validation.

    WGA Diagnostic:

    Diagnostic Report (1.9.0006.1):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: 0x80070426
    Cached Validation Code: N/A, hr = 0x80070426
    Windows Product Key: *****-*****-4GV68-6D8JB-G6MF9
    Windows Product Key Hash: Ua+OBZ1y48sKA/bWkfKXiuCrOjY=
    Windows Product ID: 89578-OEM-7332157-00203
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6000.2.00010300.0.0.003
    ID: {C1B77404-096C-4B5A-A840-CA01112D8B16}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.9.9.1
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.080917-1612
    TTS Error: M:20090311132857117-
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: 6.0.6002.16398

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\Slsvc.exe[6.0.6000.16509]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C1B77404-096C-4B5A-A840-CA01112D8B16}</UGUID><Version>1.9.0006.1</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-G6MF9</PKey><PID>89578-OEM-7332157-00203</PID><PIDType>2</PIDType><SID>S-1-5-21-3646687596-4182704412-106718496</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VGN-N325E</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>R0100J4</Version><SMBIOSVersion major="2" minor="4"/><Date>20070208000000.000000+000</Date></BIOS><HWID>37333507018400EE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Mountain Standard Time(GMT-07:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>4FB0C1B72F2DF10</Val><Hash>ucgH9X2GdcUma/8J6fRj55dcIFU=</Hash><Pid>81602-904-6470864-68116</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software Licensing service is not running.

    HWID Data-->
    HWID Hash Current: OAAAAAEABAABAAIAAgAAAAAAAwABAAEAnJ8K/6pYPgGsbOpOSORIRjSi2uCN7/L0nKvkyaxW9Eg=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Sony  VAIO
      FACP   Sony  VAIO
      HPET   Sony  VAIO
      BOOT   Sony  VAIO
      MCFG   Sony  VAIO
      SLIC   Sony  VAIO
      APIC   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO


     

    Wednesday, March 11, 2009 7:47 PM

Answers

  •  Hello Sanson,

      In the past we found that a catistophic failure during a Windows Update could cause a On Disk Mod-Auth .  But we now know that anything that can cause a file to change, in any way, (corruption, bad disk sector, virus and so on) can cause it.

     
    To resolve the issue, you need to either repair or replace the file with a known-good one.


    First, Install Service Pack 1 for Vista (found at http://www.microsoft.com/downloads/details.aspx?FamilyID=b0c7136d-5ebb-413b-89c9-cb3d06d12674&DisplayLang=en). It contains a updated version of the file Slsvc.exe and by installing it, the new slsvc.exe will overwrite the bad version.

    Next try repairing Windows using System Restore:

    1)     Reboot Vista into Safe Mode
    2)     Go to Control Panel
    3)     On the left hand side of the Control Panel window, Click on "Classic View"
    4)     Double-click "Backup and Restore Center"
    5)     On the left hand side of the window, click "Repair Windows using system restore"
    6)     Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.
    7)     Click the "Next" button.
    8)     Reboot back into Normal mode
    9)     Vista should no longer be in Reduced Functionality mode



    If that doesn't work,  try doing a System Scan. The scan will look for bad Vista files and will attempt to repair them, if possible.

    1)     Login to Vista in Normal Mode (not safe mode)
    2)     Launch an Internet Browser
    3)     Type: %windir%\system32\ in the browser's address field
    4)     Scroll down till you find the file cmd.exe
    5)     Right-click the file and select 'Run as Administrator'
    6)     In the CMD window, type: sfc /scannow
    7)     Reboot twice and see if that resolves the issue.


    Thank you,
    Darin MS


    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers.
    • Marked as answer by Darin Smith MS Wednesday, March 11, 2009 10:05 PM
    Wednesday, March 11, 2009 10:05 PM

All replies


  • Great! So Microsoft update has caused this problem? The file mismatch is Slsvc.exe[6.0.6000.16509] which was changed in updated in KB933928. Which is the update I took immediately before the problem.

    Wednesday, March 11, 2009 9:34 PM
  •  Hello Sanson,

      In the past we found that a catistophic failure during a Windows Update could cause a On Disk Mod-Auth .  But we now know that anything that can cause a file to change, in any way, (corruption, bad disk sector, virus and so on) can cause it.

     
    To resolve the issue, you need to either repair or replace the file with a known-good one.


    First, Install Service Pack 1 for Vista (found at http://www.microsoft.com/downloads/details.aspx?FamilyID=b0c7136d-5ebb-413b-89c9-cb3d06d12674&DisplayLang=en). It contains a updated version of the file Slsvc.exe and by installing it, the new slsvc.exe will overwrite the bad version.

    Next try repairing Windows using System Restore:

    1)     Reboot Vista into Safe Mode
    2)     Go to Control Panel
    3)     On the left hand side of the Control Panel window, Click on "Classic View"
    4)     Double-click "Backup and Restore Center"
    5)     On the left hand side of the window, click "Repair Windows using system restore"
    6)     Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.
    7)     Click the "Next" button.
    8)     Reboot back into Normal mode
    9)     Vista should no longer be in Reduced Functionality mode



    If that doesn't work,  try doing a System Scan. The scan will look for bad Vista files and will attempt to repair them, if possible.

    1)     Login to Vista in Normal Mode (not safe mode)
    2)     Launch an Internet Browser
    3)     Type: %windir%\system32\ in the browser's address field
    4)     Scroll down till you find the file cmd.exe
    5)     Right-click the file and select 'Run as Administrator'
    6)     In the CMD window, type: sfc /scannow
    7)     Reboot twice and see if that resolves the issue.


    Thank you,
    Darin MS


    Attention All Forum Users: Please Do Not post your issue in someone else's Thread...Create your own. If any post fixes your issue, please click the "Post was Helpful" button for that post. This will help us showcase the threads that best help our customers.
    • Marked as answer by Darin Smith MS Wednesday, March 11, 2009 10:05 PM
    Wednesday, March 11, 2009 10:05 PM