locked
How do I get a response to my continued 0xC004D401 problem? RRS feed

  • Question

  • On September 28th 2007 I started a thread called "Update on error 0xC004D401 part II" All went well until October 2nd when I received some instructions as to how to proceed. Since the despite a number of posts there has been no response. I know I am only one user with one vista machine but to have this problem for over a month and cannot recommend Vista with this slow response time. I will update the original thread with a comment.

    Rob
    Monday, October 29, 2007 2:33 AM

Answers

  • Hi Carey

    Thank you for the reply. as far as I can see the list of programs that cause this problem is:

    PC Tools Spyware Doctor

    Trend Micro Internet Security (incl. PC-Cillin Anti-Virus)

    nProtect GameGuard

    Gunbound, Maplestory, 9 Dragons, FLYFF, Pangya, Kwonho all with fixes available


    I have none of these programs installed on my pc.

    I did have a probelm with MusicMatch Juke box that is no longer being supported but I had a copy on CD. I have uninstalled that and my copy of Yahoo MusciMatch jukebox which also seems to make the problems worse.

    Any other suggestions of software I can remove would be gratefully received as I have to spend at least half an hour logging on each morning as most the the attempts to log in are greeted with the" Windows Software protection error An unauthorized change was made to windows. Windows has discovered a change that will result in limited windows functionality Use the link below to find out how to fix windows". It does not matter if I learn more online or close or use the X in the top of the window I am presented with the list of users I can log in toand must repeatedly try again.Eventually I get the 0xC004D401 error and can log in.

    Thanks for your help.

    Rob
    Tuesday, October 30, 2007 4:29 AM
  • Marking this thread as answered as Rob is working directly with support.

     

    Darin Smith

    WGA Forum Manager

     

    Wednesday, November 7, 2007 11:40 PM
  • Hi King Don

    I have now passed a file to Microsoft and that has been analyzed and my suggestion was wrong.

    The situation is that I had an adware/spyware/malware program that altered some DLL's namely

    ntdll!LdrLoadDll has been shimmed

    DNSAPI.dll!DnsQuery_W has been redirected

    DNSAPI.dll has been patched


    I have since run some more diagnostics and I am waiting to see what the next step is.


    Thanks for the information and I will check this up on the HPp site. I know that for a period of several days when I first had the machine I was getting new drivers from both HP and Microsoft repeatedly.


    Thanks


    Rob


    Saturday, November 10, 2007 3:24 AM

All replies

  • Monday, October 29, 2007 2:48 PM
    Moderator
  • Hi Carey

    Thank you for the reply. as far as I can see the list of programs that cause this problem is:

    PC Tools Spyware Doctor

    Trend Micro Internet Security (incl. PC-Cillin Anti-Virus)

    nProtect GameGuard

    Gunbound, Maplestory, 9 Dragons, FLYFF, Pangya, Kwonho all with fixes available


    I have none of these programs installed on my pc.

    I did have a probelm with MusicMatch Juke box that is no longer being supported but I had a copy on CD. I have uninstalled that and my copy of Yahoo MusciMatch jukebox which also seems to make the problems worse.

    Any other suggestions of software I can remove would be gratefully received as I have to spend at least half an hour logging on each morning as most the the attempts to log in are greeted with the" Windows Software protection error An unauthorized change was made to windows. Windows has discovered a change that will result in limited windows functionality Use the link below to find out how to fix windows". It does not matter if I learn more online or close or use the X in the top of the window I am presented with the list of users I can log in toand must repeatedly try again.Eventually I get the 0xC004D401 error and can log in.

    Thanks for your help.

    Rob
    Tuesday, October 30, 2007 4:29 AM
  • Hello Rob,

     

      We have updated the Diagnostic Tool to better troubleshoot this type of issue, would you download and run the Genuine Diagnostics tool at this link http://go.microsoft.com/fwlink/?linkid=52012. Click "Continue" click the Windows tab, click the "Copy" button, then paste the report into a response message in this thread.

     

    If you do not have access to the Start button, follow the below steps:
    1) Login to Vista and Click the option that brings up Internet Explorer.

    2) Type: http://go.microsoft.com/fwlink/?linkid=52012 into the browser address bar.

    3) A window will come up asking if you want to Run or Save, Select Run

    4) When the program runs, Click the Continue button, then click the Copy button.

    5) Return to this thread by Typing: http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=2333676&SiteID=25 into the browser address bar.

    6) In a reply post, Paste the Diagnostic Report.

     

    Once you have posted the Diagnostic Report, we will mostly need to contact you directly. To do that, I will need your email address, but I do not want you to post your address in a public forum. So the only other way is for you to to create  support request at https://support.microsoft.com/oas/default.aspx?c1=509&gprid=9860. Once done, post the Confirmation ID in this post. I will then be able to look up the email address you used to open the support request.

     

     

    Thank you,
    Darin Smith
    WGA Forum Manager
    Tuesday, October 30, 2007 5:57 PM
  • Darin

    Here is the diagnostic report as requested

    Diagnostic Report (1.7.0062.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Online Validation Code: 0xc004d401
    Cached Validation Code: N/A, hr = 0xc004d401
    Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
    Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
    Windows Product ID: 89572-OEM-7332166-00021
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6000.2.00010300.0.0.000
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {D2A7B2B0-58BE-4514-B509-D46868631E14}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered, 1.7.59.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.070627-1500
    TTS Error: K:20071030090409498-M:20071031064230397-
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    Grace Flag: N/A, hr = 0xc004d401
    Commit: N/A, hr = 0xc004d401
    Reboot Flag: 0x0
    ThreatID(s): N/A, hr = 0xc004d401
    Wgaer.exe Version: N/A, hr = 0x80070002
    Wgaer.exe Signed By: N/A, hr = 0x80070002

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2968-80070002_77F760FE-152-80070002_7E90FEE8-175-80070002

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D2A7B2B0-58BE-4514-B509-D46868631E14}</UGUID><Version>1.7.0062.0</Version><OS>6.0.6000.2.00010300.0.0.000</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-3754682933-1930868400-2235505891</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Presario V6000 (GC211PA#AB5)      </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.27    </Version><SMBIOSVersion major="2" minor="4"/><Date>20070118000000.000000+000</Date></BIOS><HWID>A6303507018400EC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>China Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x800700EA

    I will make another attempt to create a support request, however this is where my last attempt to get support failed.

    Thanks

    Rob
    Wednesday, October 31, 2007 9:20 AM
  • I have tried to enter a support request but it fails with a message saying that the product-id is invalied. Is this caused by the fact tht this copy of Vista was already installed on my HP compaq presario and so the product id contains the letters OEM?

    Thanks

    Rob
    Wednesday, October 31, 2007 9:57 AM
  • Hi Rob,

     

      There must be some sort of disconnect between the URL, that I give you to open a service request, and the URL you get to.  The reason I say this is because, to open a WGA service request, no Product ID is required. So insead of spinning our wheels trying to get you to the right place to open a service request just so I can get your email, so I can contact you directly, I'm going to create a temporary Hotmail account, that you can email me at. Once I get your email, I will close down the hotmail account.

     

      The hotmail address is wgawgawga @ Hotmail . com  (remove the spaces)

     

      Basically I don't want to post my permanent email address or have you post your email address, in this public forum, in fear getting spammed.

     

    Thank you,
    Darin Smith
    WGA Forum Manager
    Thursday, November 1, 2007 4:31 PM
  • A friend has suggested that the problem may be caused by the nVIDIA driver on my screen. I did notice a number of driver downloads from both HP and Microsoft a little while ago but I cannot get into my history.

    E-mail sent

    Thanks
    Rob
    Saturday, November 3, 2007 2:31 PM
  • Marking this thread as answered as Rob is working directly with support.

     

    Darin Smith

    WGA Forum Manager

     

    Wednesday, November 7, 2007 11:40 PM
  • In a thread on HP's web site, there are many many users of the Compaq Presario v6000 with Vista who are having a problem with their nVidia network cards just pooping out and not being seen by Vista.

     

    Is there a publicly listed solution.  I think that Vista was forced onto these machines, and that they were not heavily tested.

     

    I'm hoping that Rob's problem was similar, because I can't find help anywhere.  I ran the diagnostic tool that was suggested here, and came up with this:

     

    Diagnostic Report (1.7.0062.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: 0x0
    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
    Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
    Windows Product ID: 89578-OEM-7332157-00061
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6000.2.00010300.0.0.003
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {B248AECB-2975-46CC-AD6C-3B3B34F8E56F}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.070627-1500
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    Grace Flag: 0x0
    Commit: N/A, hr = 0xc004f012
    Reboot Flag: 0x0
    ThreatID(s): N/A, hr = 0xc004f012
    Wgaer.exe Version: N/A, hr = 0x80070002
    Wgaer.exe Signed By: N/A, hr = 0x80070002

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2968-80070002_025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{B248AECB-2975-46CC-AD6C-3B3B34F8E56F}</UGUID><Version>1.7.0062.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-3394805173-3835504736-3732682163</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Presario V6000 (RP211UA#ABA)      </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.25    </Version><SMBIOSVersion major="2" minor="4"/><Date>20061218000000.000000+000</Date></BIOS><HWID>DB323507018400EC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>6D2EF3BF7AEE6AC</Val><Hash>8cSIwpeyNCTFVBRQlOx2sM8O8lM=</Hash><Pid>81599-854-5845042-65195</Pid><PidType>1</PidType></Product></Products></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

     

    Saturday, November 10, 2007 1:25 AM
  • Hi King Don

    I have now passed a file to Microsoft and that has been analyzed and my suggestion was wrong.

    The situation is that I had an adware/spyware/malware program that altered some DLL's namely

    ntdll!LdrLoadDll has been shimmed

    DNSAPI.dll!DnsQuery_W has been redirected

    DNSAPI.dll has been patched


    I have since run some more diagnostics and I am waiting to see what the next step is.


    Thanks for the information and I will check this up on the HPp site. I know that for a period of several days when I first had the machine I was getting new drivers from both HP and Microsoft repeatedly.


    Thanks


    Rob


    Saturday, November 10, 2007 3:24 AM