none
Another recent Vista 'not genuine' issue

    Question

  • Sunday morning, I went to install a handful of Microsoft updates (15 I think) and rebooted the system.  After the reboot, the system has decided that it is no longer genuine.  I DO believe I have the full list of which updates attempted to install (based on inference from what shows up in Windows Update).  A bunch of them failed mid-stream due to not being genuine.  If it was a Windows update that caused the issue, my main suspect would be the two updates of Windows Defender that occurred one right after the other during that update process.

    This system has shown up as genuine for the last three months, and the only recent software upgrades were the windows updates and possibly some Avast Antivirus updates.  I've removed Avast temporarily, but it did not solve my problem.

    It seems that my main error is error: C004D401 (system tampering detected?).

    At the same time, I seem to have lost access to our printers (two network printers as well as a local CutePDF virtual printer), and I can not access the control panel directly (start... control panel) but I can expand the folder under Windows explorer, and get to the items there.  I'm hoping when the validation issue is solved, these other issues will go away.

    I have opened a case with the email support, but after an initial contact from them Monday morning, I tried several items, and answered all of their questions, but haven't heard back in over 36 hours since my reply.  Since my wife is using the machine for her business, there is a little more pressure to get this resolved quickly, so I am pursuing any avenues I can.

    Here is what I've attempted:
    1)  Phone activation:  SLUI.EXE 4 does not bring up the phone prompt.  Instead it brings up two windows, one of which states 'there is a problem with your licensing, so notifications will no longer appear' and the other states that 'an unauthorized changed was made to your license.'  So as far as I can tell, I have no avenue to talk via phone to an MS rep.
    2)  I've removed Avast! antivirus.
    3)  I've checked for the other programs including GameGuard protected games, CD/DVD Emulation software, and other 3rd party security software.  None was installed.
    4)  As requested by the support person from Microsoft, I did a 'clean boot' using MSCONFIG to disable most everything (non MS services, and all 'startup' items).  I still was not genuine and could not validate.
    5)  As requested by the support person from Microsoft, while in Clean Boot mode, I attemped to re-enter the product key.  However when I attempted to do so, I received a message box that stated: "The following error occurred while  trying to use the product key: Code  C004F033.  From searching MSDN It looks like it believes that this key is already in use (probably by this computer?).

    This is a Windows Vista Ultimate system running on a Dell Inspiron E1505.  Dell shipped the system with Windows Vista Home Premium installed, but I purchased a Vista Ultimate disk and upgraded the system to Ultimate.

    I was considering attempting to enter the Home Premium Key (currently unused), and then move back to the Ultimate key, based on that error C004F033, but I don't know if that's a valid or safe thing to do.

    I've also submitted the large data collection report that is made when you file a case, which would be attached to the case number.

    If anyone can help, I would truly appreciate it. 

    My WGA diagnostic report is below:
    Diagnostic Report (1.7.0039.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Detailed Status: 0xc004f027
    Cached / Grace status: (N/A, hr = 0x80004005) / (N/A, hr = 0x80004005)
    Windows Product Key: *****-*****-RV8YT-JFDQJ-VB984
    Windows Product Key Hash: R1Uv6SQpWfSWMx8AQzFj2hWeEPc=
    Windows Product ID: 89580-447-3845546-71761
    Windows Product ID Type: 5
    CSVLK Server: N/A
    CSVLK PID: N/A
    Windows License Type: Retail
    Windows OS version: 6.0.6000.2.00010100.0.0.000
    ID: {A13C0FE3-A0BD-4CDE-BEDD-FD762CE7468A}(1)
    Is Admin: Yes
    Commit / Reboot / BRT: (N/A, hr = 0x80004005) / 0x0 / (N/A, hr = 0x80004005)
    WGA Version: Registered, 1.7.36.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Ultimate
    Architecture: 0x00000000
    Build lab: 6000.vista_rtm.061101-2205
    TTS Error: M:20070715083034719-
    Validation Diagnostic:
    Resolution Status: N/A

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    OGA Version: Failed to retrieve file version. - 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2993-80070002_025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{A13C0FE3-A0BD-4CDE-BEDD-FD762CE7468A}</UGUID><Version>1.7.0039.0</Version><OS>6.0.6000.2.00010100.0.0.000</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VB984</PKey><PID>89580-447-3845546-71761</PID><PIDType>5</PIDType><SID>S-1-5-21-2297381138-2652966944-46172526</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>MM061                           </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A13</Version><SMBIOSVersion major="2" minor="4"/><Date>20070205000000.000000+000</Date></BIOS><HWID>B28F3007018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M07    </OEMTableID></OEM></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>5406AE6CF75BECE</Val><Hash>6mATOYBjvXCn7xeGQd4nOQRBS3s=</Hash><Pid>81599-871-0584882-65554</Pid><PidType>1</PidType></Product></Products></Office></Software></GenuineResults> 


    Wednesday, July 18, 2007 12:26 AM

Answers

All replies

  • Hello,

    Please check this post:

    http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=897109&SiteID=25

    If none of those programs could be causing your issue, please open a free service request by visiting: https://support.microsoft.com/oas/default.aspx?c1=509&gprid=9860 and post your confirmation number here.  I'll contact you directly so we can figure out the cause of your issue.  Thank you!

     

    Saturday, July 28, 2007 6:01 AM
  • Same problem more or less, didn't want to start a new thread so I figured this was the place to reply. I can't access the first link, it says I'm not authorized, and the second link doesn't help because I cannot find my PID if I can't open Control Panel which is a symptom of this Tampering issue. 

    Update: I found my PID in the diagnostic report, and tried to used that to recieve support, unfortunately it says that my Product ID is incorrect. If this is the wrong number then I do not know how to pursue the technical support I need.

    I'll provide my MGA Diagnosis as well:

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Status: Invalid License

    Validation Code: 50

    Cached Online Validation Code: N/A, hr = 0xc004d401

    Windows Product Key: *****-*****-Y462J-34MGQ-9WKV6

    Windows Product Key Hash: f83QZblresGfsh2fb/WJqihVL+w=

    Windows Product ID: 89583-OEM-7359891-61592

    Windows Product ID Type: 3

    Windows License Type: OEM System Builder

    Windows OS version: 6.0.6001.2.00010300.1.0.003

    ID: {0FBDAB3A-F878-46A7-B758-C12FE0CDF17A}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows Vista (TM) Home Premium

    Architecture: 0x00000009

    Build lab: 6001.vistasp1_gdr.100608-0458

    TTS Error: K:20110401125909532-M:20110331125102948-

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 102

    Microsoft Office Professional 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Users\Andrew\AppData\Local\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{0FBDAB3A-F878-46A7-B758-C12FE0CDF17A}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-9WKV6</PKey><PID>89583-OEM-7359891-61592</PID><PIDType>3</PIDType><SID>S-1-5-21-1234351774-49281891-4187234282</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P35-DS3L</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20071129000000.000000+000</Date></BIOS><HWID>EC323507018400FA</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>BB1D238961402BE</Val><Hash>/glvaHzTX/lG8UEpIqCn8q4tb6k=</Hash><Pid>81605-351-3127366-65088</Pid><PidType>10</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

     

    Spsys.log Content: U1BMRwEAAAAAAQAACAAAALeV/QAAAAAAYWECAAAAAADAcd7Pw+/LARhy9171jCizkdIEkQaJZ67Ku3z4ysKhkPmV8kI6L+t2iLkHP8yLSgPm/zcX7xd9qyd7IPmIgITKmLNv1wD2WLZ8YHweAMVW0wj3E7D7ZZWb4DkkCd2V0+w0qMw9NW1lJIqaMVS50xsGhTiu2v3HTjLlzsauw1rN6YPtvvhlgmsOgBe4wEVRYcHWzat6M07q88GxBpop0WwiuBXa5HXuzs1OU5kpI4Km83cHZMn5BmY2HdKPD8tNYkwP34K9Ekif+jOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAw=

     

    Licensing Data-->

    C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401

     

    Windows Activation Technologies-->

    N/A

     

    HWID Data-->

    HWID Hash Current: PgAAAAMABgABAAEAAgABAAAAAgABAAEAJJSQ305kx4+j6ZiyGJ9a2XTmiP3iX0LhnuGN7/L0TDZ+AKxWKoU=

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes, but no SLIC table

    Windows marker version: N/A

    OEMID and OEMTableID Consistent: N/A

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC GBT   GBTUACPI

      FACP GBT   GBTUACPI

      HPET GBT   GBTUACPI

      MCFG GBT   GBTUACPI

      SSDT PmRef Cpu0Ist

      SSDT PmRef Cpu0Ist

     

     

    Friday, April 01, 2011 6:44 PM
  • "Kavaal" wrote in message news:a2d40713-d85b-4b3d-b726-d6032b0bda6b...

    Same problem more or less, didn't want to start a new thread so I figured this was the place to reply. I can't access the first link, it says I'm not authorized, and the second link doesn't help because I cannot find my PID if I can't open Control Panel which is a symptom of this Tampering issue. 

    Update: I found my PID in the diagnostic report, and tried to used that to recieve support, unfortunately it says that my Product ID is incorrect. If this is the wrong number then I do not know how to pursue the technical support I need.

    I'll provide my MGA Diagnosis as well:

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Status: Invalid License

    Validation Code: 50

    Cached Online Validation Code: N/A, hr = 0xc004d401

    Windows Product Key: *****-*****-Y462J-34MGQ-9WKV6

    Windows Product Key Hash: f83QZblresGfsh2fb/WJqihVL+w=

    Windows Product ID: 89583-OEM-7359891-61592

    Windows Product ID Type: 3

    Windows License Type: OEM System Builder

    Windows OS version: 6.0.6001.2.00010300.1.0.003

     

     


    Please repost your own problem to your OWN NEW thread - this avoids confusion for all!
    Having said that, the 'quick answer' is that you probably have malware resent on your machine - download, install, update and run Malwarebytes Anti-Malware (www.malwarebytes.org) and see what it reports, and delete everything it finds - then post a new report in a NEW thread.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, April 01, 2011 7:06 PM
    Moderator