locked
NEED HELP ASAP - "Unauthorized Change" RRS feed

  • Question

  • I cant even get past my log-in page due to this eror, and a window pops up that says "An Unauthorized Change...." but I havent done anything to my Vista. Any help on what to do would be greatly appreciated.

     

     

    Here is my diagnostic:

     

    Diagnostic Report (1.7.0066.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Online Validation Code: 0x80070426
    Cached Validation Code: N/A, hr = 0x80070426
    Windows Product Key: *****-*****-F4GJK-KG77H-B9HD2
    Windows Product Key Hash: iJAth4TbScMi8HdcPurlASXdEkw=
    Windows Product ID: 89578-OEM-7332157-00204
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6000.2.00010300.0.0.003
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {633E4626-78B5-4434-9CFE-5A3DC59649DC}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.59.1
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.071009-1548
    TTS Error: M:20080207124457695-
    Validation Diagnostic:
    Resolution Status: N/A

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2989-80070002_025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\Slsvc.exe[6.0.6000.16509]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{633E4626-78B5-4434-9CFE-5A3DC59649DC}</UGUID><Version>1.7.0066.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-B9HD2</PKey><PID>89578-OEM-7332157-00204</PID><PIDType>2</PIDType><SID>S-1-5-21-1246275175-2316808153-2799643284</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>MM061                           </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A14</Version><SMBIOSVersion major="2" minor="4"/><Date>20070402000000.000000+000</Date></BIOS><HWID>49323507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M07    </OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>268DDE625813DAE</Val><Hash>+tJhoeZhKlzFsHG52WX9/lir4us=</Hash><Pid>81602-OEM-6872793-81740</Pid><PidType>4</PidType></Product></Products></Office></Software></GenuineResults> 

    Spsys.log Content: U1BMRwEAAAAAAQAABAAAACYIAAAAAAAAYWECANOQO5i5s901yGPIAdArSr9MLECc5R83cvYPeMzo23gkwrIOV4erlikxk9NCm/suRjTuD/Qun8yc4KqAThzlbKaVHBjD6SE/4CKjeOu/ZVBSgUJw0VjtLPSjZQiO27OKLWTN3/xFyngmD3afWQd5BWut+vD3FqOkH5qwY3q1CzF0U07jqdyoAL0aULPNP9KSju/t9vu9LXUgneZO8JuQnPomGb9VupAJaZo25SIJxGN5hPlYXq2AFDshBm86M5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMCLbfaMJwhSrDNgJrvHqNhYTjaGOEfaUHQDvqmdiCvoYc5WymlRwYw+khP+Aio3jru/4eNEGPMHsnYC8CRwPuL9uzii1kzd/8Rcp4Jg92n1kHeQVrrfrw9xajpB+asGN6tQsxdFNO46ncqAC9GlCzzT/Sko7v7fb7vS11IJ3mTvCbkJz6Jhm/VbqQCWmaNuUiCcRjeYT5WF6tgBQ7IQZvOjOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zIRjtNRCjP/YZdj6Yq8k4Yy51LaptksbHxFfImybueGnHOVsppUcGMPpIT/gIqN46x8QSiJuHPaSsVwYrqDyE2rbs4otZM3f/EXKeCYPdp9ZB3kFa6368PcWo6QfmrBjerULMXRTTuOp3KgAvRpQs80/0pKO7+32+70tdSCd5k7wm5Cc+iYZv1W6kAlpmjblIgnEY3mE+VherYAUOyEGbzozkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMxFR5eAmWgVMbmxTDVmScAr37ZRLeBNjDkj9b3VCFgltBzlbKaVHBjD6SE/4CKjeOvxVqWmEuGqg4NQ00RExayo27OKLWTN3/xFyngmD3afWQd5BWut+vD3FqOkH5qwY3q1CzF0U07jqdyoAL0aULPNP9KSju/t9vu9LXUgneZO8JuQnPomGb9VupAJaZo25SIJxGN5hPlYXq2AFDshBm86M5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMiUpnTd9dqlbFTfs3BUpfFsg8CCNUMK9RcmNz0Pi+Iloc5WymlRwYw+khP+Aio3jrtmDfczRuVTYMZNlUmbYbLtuzii1kzd/8Rcp4Jg92n1kHeQVrrfrw9xajpB+asGN6tQsxdFNO46ncqAC9GlCzzT/Sko7v7fb7vS11IJ3mTvCbkJz6Jhm/VbqQCWmaNuUiCcRjeYT5WF6tgBQ7IQZvOjOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zOjbeCTCsg5Xh6uWKTGT00Ji4mBMzxjeua2R4Kd0JkzOHOVsppUcGMPpIT/gIqN46/qm/UpFs+HiekKqARXzUNrbs4otZM3f/EXKeCYPdp9ZB3kFa6368PcWo6QfmrBjerULMXRTTuOp3KgAvRpQs80/0pKO7+32+70tdSCd5k7wm5Cc+iYZv1W6kAlpmjblIgnEY3mE+VherYAUOyEGbzozkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMwk4QhiLSCqqm2b3C/9n3WGvl8Rgo/IkXIJOOjwM1fV6hzlbKaVHBjD6SE/4CKjeOtqbXbtgpbNF5LKsTT6pm2Z27OKLWTN3/xFyngmD3afWQd5BWut+vD3FqOkH5qwY3q1CzF0U07jqdyoAL0aULPNP9KSju/t9vu9LXUgneZO8JuQnPomGb9VupAJaZo25SIJxGN5hPlYXq2AFDshBm86M5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMwEDyvNG8SlveVEaEdK7CIDd7a1qoIWWPEwOCpNmnaUQc5WymlRwYw+khP+Aio3jrKIWMl/GfC+w6vFeg4aerj9uzii1kzd/8Rcp4Jg92n1kHeQVrrfrw9xajpB+asGN6tQsxdFNO46ncqAC9GlCzzT/Sko7v7fb7vS11IJ3mTvCbkJz6Jhm/VbqQCWmaNuUiCcRjeYT5WF6tgBQ7IQZvOjOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zGtam5RrxelMru8JtHt2FEzyCDSmylcDy5xEDo/BiGh0HOVsppUcGMPpIT/gIqN4694UbCsKFTMc3PzPQmCHugbbs4otZM3f/EXKeCYPdp9ZB3kFa6368PcWo6QfmrBjerULMXRTTuOp3KgAvRpQs80/0pKO7+32+70tdSCd5k7wm5Cc+iYZv1W6kAlpmjblIgnEY3mE+VherYAUOyEGbzozkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMxEPkKgktGCwkQAyhNUuvioGEPSvCSIU1je6iKm+goNkRzlbKaVHBjD6SE/4CKjeOtP0Rnq/4Q/NIAsdf8HUOro27OKLWTN3/xFyngmD3afWQd5BWut+vD3FqOkH5qwY3q1CzF0U07jqdyoAL0aULPNP9KSju/t9vu9LXUgneZO8JuQnPomGb9VupAJaZo25SIJxGN5hPlYXq2AFDshBm86M5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMqc4CMnAjud7zdWPGwVLc1lhkw0vXW2weneS47BtcReMc5WymlRwYw+khP+Aio3jrrcxjHbrvhBS+v3b6pJnWQNuzii1kzd/8Rcp4Jg92n1kHeQVrrfrw9xajpB+asGN6tQsxdFNO46ncqAC9GlCzzT/Sko7v7fb7vS11IJ3mTvCbkJz6Jhm/VbqQCWmaNuUiCcRjeYT5WF6tgBQ7IQZvOjOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zBcs5Ug+07/OIKMLT814BWsPEfp/C/eDkc31v62UCKT4HOVsppUcGMPpIT/gIqN46+Xc9FMyvqD18Nw7lyHRV4Tbs4otZM3f/EXKeCYPdp9ZB3kFa6368PcWo6QfmrBjerULMXRTTuOp3KgAvRpQs80/0pKO7+32+70tdSCd5k7wm5Cc+iYZv1W6kAlpmjblIgnEY3mE+VherYAUOyEGbzozkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMy33s+pxedDfAzcWBpbsCKPO3MFC+iv4x5EprbPtubodBzlbKaVHBjD6SE/4CKjeOs3I5Zfq5EdH4+bE4uU/TKy27OKLWTN3/xFyngmD3afWQd5BWut+vD3FqOkH5qwY3q1CzF0U07jqdyoAL0aULPNP9KSju/t9vu9LXUgneZO8JuQnPomGb9VupAJaZo25SIJxGN5hPlYXq2AFDshBm86M5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jM6V1fbfcRxh4VQOOw/dHQ4vnMOpan3HyKCXA7r7hc+FUc5WymlRwYw+khP+Aio3jrUpr87ThIV555ZLA+jepOZduzii1kzd/8Rcp4Jg92n1kHeQVrrfrw9xajpB+asGN6tQsxdFNO46ncqAC9GlCzzT/Sko7v7fb7vS11IJ3mTvCbkJz6Jhm/VbqQCWmaNuUiCcRjeYT5WF6tgBQ7IQZvOjOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zBXSigYFIQFuJrQ4TqVDTHZQWzps9pLT68vnDDxB+aoaHOVsppUcGMPpIT/gIqN465tRuz93G2vchXin9zT0BmPbs4otZM3f/EXKeCYPdp9ZB3kFa6368PcWo6QfmrBjerULMXRTTuOp3KgAvRpQs80/0pKO7+32+70tdSCd5k7wm5Cc+iYZv1W6kAlpmjblIgnEY3mE+VherYAUOyEGbzozkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMxu5fwj4XgDgxVhxOVWQwFQLvW8mICgBYenEcOH4fG0ThzlbKaVHBjD6SE/4CKjeOupdIi4rczapEwq/90h4KBd27OKLWTN3/xFyngmD3afWQd5BWut+vD3FqOkH5qwY3q1CzF0U07jqdyoAL0aULPNP9KSju/t9vu9LXUgneZO8JuQnPomGb9VupAJaZo25SIJxGN5hPlYXq2AFDshBm86M5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAzQK0q/TCxAnOUfN3L2D3jMqvrhRXl5kjKSynHpHoxATbxKq+kSFYtdh5PmPfUWV3Mc5WymlRwYw+khP+Aio3jrR010vOw5WBPvoIuzdu7KKtuzii1kzd/8Rcp4Jg92n1kHeQVrrfrw9xajpB+asGN6tQsxdFNO46ncqAC9GlCzzT/Sko7v7fb7vS11IJ3mTvCbkJz6Jhm/VbqQCWmaNuUiCcRjeYT5WF6tgBQ7IQZvOjOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM0CtKv0wsQJzlHzdy9g94zLgBOO+X/DeR9YJjk7d2FZIdupOZMYAdo3V3t9U2leHaHOVsppUcGMPpIT/gIqN46zsVGvEZ09jW7LuJ+VncNTjbs4otZM3f/EXKeCYPdp9ZB3kFa6368PcWo6QfmrBjerULMXRTTuOp3KgAvRpQs80/0pKO7+32+70tdSCd5k7wm5Cc+iYZv1W6kAlpmjblIgnEY3mE+VherYAUOyEGbzozkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDNArSr9MLECc5R83cvYPeMxXaE29Xd0DnvHEkTCcyj0cR9G/ZnEkxYz5yZ1W0ZOYyBzlbKaVHBjD6SE/4CKjeOvQkqdg/qgvG71DQtaVOK+127OKLWTN3/xFyngmD3afWQd5BWut+vD3FqOkH5qwY3q1CzF0U07jqdyoAL0aULPNP9KSju/t9vu9LXUgneZO8JuQnPomGb9VupAJaZo25SIJxGN5hPlYXq2AFDshBm86M5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAw=

     

     

    Thursday, February 7, 2008 7:22 PM

Answers

  • Hi flyingnate88,

     

    Vista is in, what is called a 'Mod-Auth' Tamper state.  There are 2 types of Mod-Auth tampers.

     

    1) A critical system file was modified On Disk - What this means is that the file, located on the hard drive, was modified in some way. This can be caused by random file corruption, a malicious program (spyware, malware, virus) or by manual file modification (by a user of the system). There is also a very small chance that an Update may fail in mid-update and cause this type of issue. As a safety mechanism, Updates are made so that if they fail, they roll back any updating that was done before the failure, but there is an off-chance that the roll back did not occure.

     

    2) A critical system file was modified In Memory - What this means is the file itself (on the hard drive) is un-modified, but the code, from that file, running in the system, was modified in some way. and is usually caused by a running program that is incompatible with Vista.

     

    Because of the Mismatched files listed under the "File Scan Data-->" line of your Diagnostic Report, your issue is an On Disk Mod-Auth. The file Slsvc.exe[6.0.6000.16509] has been either Modified or Corrupted.

     

    This file (and other Critical System Files) are monitored by Vista because in the past Windows, these files had been known to be modified to allow the uses of Windows without a Valid Lisence. So if one of these files is found to have been tampered (either modified or corrupted) Vista reacts by going into Reduced Functionality Mode.

     

    You will notice the long number after the file's name ([6.0.6000.16509]). The number is that file's build number. Each time a file is updated, the file gets a new build number. I can look up these file/build number combonations and find out what update was last applied to that file.

     

      The reason I do this is that to fix your issue, we need to get the file back to an unmodified/uncorrupted state. The best way I know to do this is to re-install the Update that updated that file to that specific build number. The last update that was applied to Slsvc.exe (that made if build number [6.0.6000.16509]) was KB933928.

     

      The problem is, that most Vista updated, once installed, will not allow the update to be reinstalled. If you try, you will usually get the error "This update does not apply to your system". So to be able to re-install the update(s), we will first need to uninstall them.

     

    NOTE: I am Not saying that this Update caused the problem, only that the Modification/Cprruption of file Slsvc.exe[6.0.6000.16509] happened either during or after Update KB933928 was applied to it.

     

     

    To Uninstall an update:

     

    1) Login to Vista in Safe Mode

    2) Once in Safe Mode, go to the Control Panel

    3) In the Control Panel find and double-click on "Programs and Features"

    4) In the Programs and Features window, click "View installed updates" (it will be located under "Tasks" on the upper left hand side of the window) 

    5) The list of installed updates may take a long time to load.

    6) Once the list loads, find the update with (KB933928) after the name.

    7) Right-click that it and select "Uninstall"

    8) Once the update uninstalls, reboot back into Normal Mode.

     

    To Reinstall updates:

    1) Click the option that launches an Internet Browser

    2) Go to http://www.microsoft.com/downloads/details.aspx?FamilyID=dc2ad07b-d5d7-407a-9a0e-3f3d142682d0&DisplayLang=en

    3) Click the "Download" button

    4) You will be asked if you want to Open or Save the file..select Open

    5) Some other windows will pop-up, click Allow and/or Continue on these windows.

    6) Once the update has installed, reboot (I suggest rebooting 2 times to ensure the Mod-Auth state has cleared).

     

    If you have any problems or receive any errors while following my steps, please create a (no cost) support request at http://go.microsoft.com/fwlink/?linkid=52029 for further assistance.

     

    Thank you,

    Darin Smith

    WGA Forum Manager

    Thursday, February 7, 2008 8:53 PM