Answered by:
How do I get a response to my continued 0xC004D401 problem?

Question
-
On September 28th 2007 I started a thread called "Update on error 0xC004D401 part II" All went well until October 2nd when I received some instructions as to how to proceed. Since the despite a number of posts there has been no response. I know I am only one user with one vista machine but to have this problem for over a month and cannot recommend Vista with this slow response time. I will update the original thread with a comment.
RobMonday, October 29, 2007 2:33 AM
Answers
-
Hi Carey
Thank you for the reply. as far as I can see the list of programs that cause this problem is:
PC Tools Spyware Doctor
Trend Micro Internet Security (incl. PC-Cillin Anti-Virus)
nProtect GameGuard
Gunbound, Maplestory, 9 Dragons, FLYFF, Pangya, Kwonho all with fixes available
I have none of these programs installed on my pc.
I did have a probelm with MusicMatch Juke box that is no longer being supported but I had a copy on CD. I have uninstalled that and my copy of Yahoo MusciMatch jukebox which also seems to make the problems worse.
Any other suggestions of software I can remove would be gratefully received as I have to spend at least half an hour logging on each morning as most the the attempts to log in are greeted with the" Windows Software protection error An unauthorized change was made to windows. Windows has discovered a change that will result in limited windows functionality Use the link below to find out how to fix windows". It does not matter if I learn more online or close or use the X in the top of the window I am presented with the list of users I can log in toand must repeatedly try again.Eventually I get the 0xC004D401 error and can log in.
Thanks for your help.
RobTuesday, October 30, 2007 4:29 AM -
Marking this thread as answered as Rob is working directly with support.
Darin Smith
WGA Forum Manager
Wednesday, November 7, 2007 11:40 PM -
Hi King Don
I have now passed a file to Microsoft and that has been analyzed and my suggestion was wrong.
The situation is that I had an adware/spyware/malware program that altered some DLL's namely
ntdll!LdrLoadDll has been shimmed
DNSAPI.dll!DnsQuery_W has been redirected
DNSAPI.dll has been patched
I have since run some more diagnostics and I am waiting to see what the next step is.
Thanks for the information and I will check this up on the HPp site. I know that for a period of several days when I first had the machine I was getting new drivers from both HP and Microsoft repeatedly.
Thanks
Rob
Saturday, November 10, 2007 3:24 AM
All replies
-
Please check this post: http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=897109&SiteID=25
Monday, October 29, 2007 2:48 PMModerator -
Hi Carey
Thank you for the reply. as far as I can see the list of programs that cause this problem is:
PC Tools Spyware Doctor
Trend Micro Internet Security (incl. PC-Cillin Anti-Virus)
nProtect GameGuard
Gunbound, Maplestory, 9 Dragons, FLYFF, Pangya, Kwonho all with fixes available
I have none of these programs installed on my pc.
I did have a probelm with MusicMatch Juke box that is no longer being supported but I had a copy on CD. I have uninstalled that and my copy of Yahoo MusciMatch jukebox which also seems to make the problems worse.
Any other suggestions of software I can remove would be gratefully received as I have to spend at least half an hour logging on each morning as most the the attempts to log in are greeted with the" Windows Software protection error An unauthorized change was made to windows. Windows has discovered a change that will result in limited windows functionality Use the link below to find out how to fix windows". It does not matter if I learn more online or close or use the X in the top of the window I am presented with the list of users I can log in toand must repeatedly try again.Eventually I get the 0xC004D401 error and can log in.
Thanks for your help.
RobTuesday, October 30, 2007 4:29 AM -
Hello Rob,
We have updated the Diagnostic Tool to better troubleshoot this type of issue, would you download and run the Genuine Diagnostics tool at this link http://go.microsoft.com/fwlink/?linkid=52012. Click "Continue" click the Windows tab, click the "Copy" button, then paste the report into a response message in this thread.
If you do not have access to the Start button, follow the below steps:
1) Login to Vista and Click the option that brings up Internet Explorer.2) Type: http://go.microsoft.com/fwlink/?linkid=52012 into the browser address bar.
3) A window will come up asking if you want to Run or Save, Select Run
4) When the program runs, Click the Continue button, then click the Copy button.
5) Return to this thread by Typing: http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=2333676&SiteID=25 into the browser address bar.
6) In a reply post, Paste the Diagnostic Report.
Once you have posted the Diagnostic Report, we will mostly need to contact you directly. To do that, I will need your email address, but I do not want you to post your address in a public forum. So the only other way is for you to to create support request at https://support.microsoft.com/oas/default.aspx?c1=509&gprid=9860. Once done, post the Confirmation ID in this post. I will then be able to look up the email address you used to open the support request.
Darin Smith
WGA Forum ManagerTuesday, October 30, 2007 5:57 PM -
Darin
Here is the diagnostic report as requested
Diagnostic Report (1.7.0062.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
Online Validation Code: 0xc004d401
Cached Validation Code: N/A, hr = 0xc004d401
Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
Windows Product ID: 89572-OEM-7332166-00021
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6000.2.00010300.0.0.000
CSVLK Server: N/A
CSVLK PID: N/A
ID: {D2A7B2B0-58BE-4514-B509-D46868631E14}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.59.0
Signed By: Microsoft
Product Name: Windows Vista (TM) Home Basic
Architecture: 0x00000000
Build lab: 6000.vista_gdr.070627-1500
TTS Error: K:20071030090409498-M:20071031064230397-
Validation Diagnostic:
Resolution Status: N/A
WgaER Data-->
Grace Flag: N/A, hr = 0xc004d401
Commit: N/A, hr = 0xc004d401
Reboot Flag: 0x0
ThreatID(s): N/A, hr = 0xc004d401
Wgaer.exe Version: N/A, hr = 0x80070002
Wgaer.exe Signed By: N/A, hr = 0x80070002
Notifications Data-->
Cached Result: N/A
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: FCEE394C-2968-80070002_77F760FE-152-80070002_7E90FEE8-175-80070002
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{D2A7B2B0-58BE-4514-B509-D46868631E14}</UGUID><Version>1.7.0062.0</Version><OS>6.0.6000.2.00010300.0.0.000</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-3754682933-1930868400-2235505891</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Presario V6000 (GC211PA#AB5) </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.27 </Version><SMBIOSVersion major="2" minor="4"/><Date>20070118000000.000000+000</Date></BIOS><HWID>A6303507018400EC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>China Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults>
Spsys.log Content: 0x800700EA
I will make another attempt to create a support request, however this is where my last attempt to get support failed.
Thanks
RobWednesday, October 31, 2007 9:20 AM -
I have tried to enter a support request but it fails with a message saying that the product-id is invalied. Is this caused by the fact tht this copy of Vista was already installed on my HP compaq presario and so the product id contains the letters OEM?
Thanks
RobWednesday, October 31, 2007 9:57 AM -
Hi Rob,
There must be some sort of disconnect between the URL, that I give you to open a service request, and the URL you get to. The reason I say this is because, to open a WGA service request, no Product ID is required. So insead of spinning our wheels trying to get you to the right place to open a service request just so I can get your email, so I can contact you directly, I'm going to create a temporary Hotmail account, that you can email me at. Once I get your email, I will close down the hotmail account.
The hotmail address is wgawgawga @ Hotmail . com (remove the spaces)
Basically I don't want to post my permanent email address or have you post your email address, in this public forum, in fear getting spammed.
Darin Smith
WGA Forum ManagerThursday, November 1, 2007 4:31 PM -
A friend has suggested that the problem may be caused by the nVIDIA driver on my screen. I did notice a number of driver downloads from both HP and Microsoft a little while ago but I cannot get into my history.
E-mail sent
Thanks
RobSaturday, November 3, 2007 2:31 PM -
Marking this thread as answered as Rob is working directly with support.
Darin Smith
WGA Forum Manager
Wednesday, November 7, 2007 11:40 PM -
In a thread on HP's web site, there are many many users of the Compaq Presario v6000 with Vista who are having a problem with their nVidia network cards just pooping out and not being seen by Vista.
Is there a publicly listed solution. I think that Vista was forced onto these machines, and that they were not heavily tested.
I'm hoping that Rob's problem was similar, because I can't find help anywhere. I ran the diagnostic tool that was suggested here, and came up with this:
Diagnostic Report (1.7.0062.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Validation Code: 0
Online Validation Code: 0x0
Cached Validation Code: 0x0
Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
Windows Product ID: 89578-OEM-7332157-00061
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6000.2.00010300.0.0.003
CSVLK Server: N/A
CSVLK PID: N/A
ID: {B248AECB-2975-46CC-AD6C-3B3B34F8E56F}(1)
Is Admin: Yes
TestCab: 0x0
WGA Version: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6000.vista_gdr.070627-1500
TTS Error:
Validation Diagnostic:
Resolution Status: N/AWgaER Data-->
Grace Flag: 0x0
Commit: N/A, hr = 0xc004f012
Reboot Flag: 0x0
ThreatID(s): N/A, hr = 0xc004f012
Wgaer.exe Version: N/A, hr = 0x80070002
Wgaer.exe Signed By: N/A, hr = 0x80070002Notifications Data-->
Cached Result: N/A
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: FCEE394C-2968-80070002_025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{B248AECB-2975-46CC-AD6C-3B3B34F8E56F}</UGUID><Version>1.7.0062.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-3394805173-3835504736-3732682163</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Presario V6000 (RP211UA#ABA) </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.25 </Version><SMBIOSVersion major="2" minor="4"/><Date>20061218000000.000000+000</Date></BIOS><HWID>DB323507018400EC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>6D2EF3BF7AEE6AC</Val><Hash>8cSIwpeyNCTFVBRQlOx2sM8O8lM=</Hash><Pid>81599-854-5845042-65195</Pid><PidType>1</PidType></Product></Products></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Saturday, November 10, 2007 1:25 AM -
Hi King Don
I have now passed a file to Microsoft and that has been analyzed and my suggestion was wrong.
The situation is that I had an adware/spyware/malware program that altered some DLL's namely
ntdll!LdrLoadDll has been shimmed
DNSAPI.dll!DnsQuery_W has been redirected
DNSAPI.dll has been patched
I have since run some more diagnostics and I am waiting to see what the next step is.
Thanks for the information and I will check this up on the HPp site. I know that for a period of several days when I first had the machine I was getting new drivers from both HP and Microsoft repeatedly.
Thanks
Rob
Saturday, November 10, 2007 3:24 AM