locked
An authorized change was made to windows - "security processor reported a system file mismatch" RRS feed

  • Question

  • Woke up this morning to a computer that won't let me into Vista (I placed the computer into standby lastnight), won't give me a taskbar, only Firefox after prompting me with the following dialogue box:

    An unauthorized change was made to windows.
    You will no longer receive notifications....
    Learn more online

    Under "show details"
    Error: 0xC004D401
    Description: The security processor reported a system file mismatch.

    ---

    When I click on Learn more online, I come to a somewhat useless page.

    > My windows is genuine - unless Lenovo knows something I don't.
    > 1. I don't have any of the listed incompatible software installed.
    > 2. If I could, I would uninstall itunes and several recent windows updates, but I can't access any of the steps listed here. This "Learn more" page pops up with a survey request that when clicked says 'Sorry, but this survey is closed." Ok.

    After roaming the Windows Vista Validation Issues forum, I come across a link to the MSGA Diagnostic Tool - apparently a prerequisite for posting on this forum. Here's my readout.

    So. What do I do?

    Diagnostic Report (1.9.0006.1):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Online Validation Code: 0xc004d401
    Cached Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-FCTC9-YRV3M-WB322
    Windows Product Key Hash: Gj9b43yYjHPZbUNPb8kvsYCdNE8=
    Windows Product ID: 89576-OEM-7304743-57533
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.0.6001.2.00010100.1.0.006
    ID: {13961C07-0815-44D7-9DD0-FAB37BA20EB5}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Business
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_gdr.080917-1612
    TTS Error: M:20090317070211094-
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: 6.0.6002.16398

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Edition 2003 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{13961C07-0815-44D7-9DD0-FAB37BA20EB5}</UGUID><Version>1.9.0006.1</Version><OS>6.0.6001.2.00010100.1.0.006</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WB322</PKey><PID>89576-OEM-7304743-57533</PID><PIDType>3</PIDType><SID>S-1-5-21-3198813513-1597408400-1211292832</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>63666AU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7JET29WW (1.14 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20080619000000.000000+000</Date></BIOS><HWID>C7300500018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>5189BBB729C8DDE</Val><Hash>Dp4+5wfxcINNAkXv+iIox2hlKL0=</Hash><Pid>70145-751-3480625-57808</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="11" Result="100"/><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/><App Id="44" Version="11" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401

    HWID Data-->
    HWID Hash Current: NgAAAAAABAABAAIAAQABAAAAAwABAAEAJJQwQD7G9O5I5OIV6LFc0LqU8vTUFs5RRFusVvRI

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            LENOVO        TP-7J  
      FACP            LENOVO        TP-7J  
      HPET            LENOVO        TP-7J  
      BOOT            LENOVO        TP-7J  
      MCFG            LENOVO        TP-7J  
      SSDT            LENOVO        TP-7J  
      ECDT            LENOVO        TP-7J  
      TCPA            LENOVO        TP-7J  
      SSDT            LENOVO        TP-7J  
      SSDT            LENOVO        TP-7J  
      SSDT            LENOVO        TP-7J  
      SSDT            LENOVO        TP-7J  



    Tuesday, March 17, 2009 2:34 PM

Answers

  • May turn out to be a problem caused by iTunes 8.1.

    I failed to restart windows after installing the updated iTunes two days ago. I had to force restart later that day (very unusual). 12 hours later, the problems began. Now that I've uninstalled iTunes 8.1 and restored windows to the last system restore point (yesterday) all is well.

    It is disconcerting to see that the last windows update occurred yesterday, despite the set policy: download yes, but require approval for installation.

    I can't imagine the trouble going through all this would be for someone any less initiated in the mysteries of the windows operating system than myself.

    Windows Genuine, where's your love?
    Tuesday, March 17, 2009 3:11 PM