Answered by:
Unauthorized Change

Question
-
Here is the report Vista is a worthless POS what do I do to get my computer working again?
Diagnostic Report (1.7.0095.0):
-----------------------------------------
WGA Data-->
Validation Status: Invalid License
Validation Code: 50
Online Validation Code: 0x80070426
Cached Validation Code: N/A, hr = 0x80070426
Windows Product Key: *****-*****-7P248-H2YV8-Y7BTV
Windows Product Key Hash: IX+Bi0XHonD1/5RviJoy2xHNCVU=
Windows Product ID: 89578-OEM-7215141-55554
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.0.6000.2.00010300.0.0.003
CSVLK Server: N/A
CSVLK PID: N/A
ID: {925F0EF0-6CB9-402E-902A-7769C64473AF}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.69.2
Signed By: Microsoft
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6000.vista_gdr.071023-1545
TTS Error: M:20080427114419385-
Validation Diagnostic:
Resolution Status: N/AWgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002WGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGATray.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\dnsapi.dll[6.0.6000.16615]Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{925F0EF0-6CB9-402E-902A-7769C64473AF}</UGUID><Version>1.7.0095.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-Y7BTV</PKey><PID>89578-OEM-7215141-55554</PID><PIDType>8</PIDType><SID>S-1-5-21-3359757356-230296853-975014377</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VGN-N250E</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>R0070J4</Version><SMBIOSVersion major="2" minor="4"/><Date>20061206000000.000000+000</Date></BIOS><HWID>71333507018400EE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>3DBAFB7BAF38F0A</Val><Hash>BUjJYXiQphaQtyLtnaLCe4CZ3jQ=</Hash><Pid>81602-901-2781424-68075</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: U1BMRwEAAAAAAQAABAAAAAoNAAAAAAAAYWECADAgAAD+5rizlqjIAdArSr9MLECc5R83cvYPeMz7Oq7Tocw9cry48TCluPIpi5XCnSpPPBzUiQTmTz7KRvmA2FF124VnPMn56Nv0G9GPeemYrtefDcuZrVPZEJ6OGD817S8Cu1HUlGNHVFBLTl0BpRsD6Dwtx6AnxzEU2IlIVcU1NmgXOc/3y+M9lv7f0nMat38/Ij8WvwlN0LR706J/AdUP4L3wi2m/Gi/9qyM7UcmmKQdXOYNsqcu4BNLbM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAw=
Sunday, April 27, 2008 7:26 PM
Answers
-
Hello Bigtinhb,
The core to your particular issue centers on the line in your Diagnostic Report that reads:
File Scan Data-->
File Mismatch: C:\Windows\system32\dnsapi.dll[6.0.6000.16615]
This line means that the critical system file dnsapi.dll either
a) Has been tampered/modified/become corrupt to the point that its Signature Hash no longer matches the Signature Hash listed in Vista's System Catalog.
Or
b) The dnsapi.dll file has recently been updated but the file's Signature Hash was not updated, in Vista's System Catalog to reflect the updated dnsapi.dll file's new Signature Hash.
Vista compares a Critical System file's Signature Hash with the Signature Hash listed in its System Catalog to determine if that Critical System file has been tampered with.
In the case of the Critical System file dnsapi.dll, on April 8th 2008, Windows Update released Update KB945553. One of the things that this update did was to update Critical System file dnsapi.dll. We believe that, in some rare cases, after the Update updated dnsapi.dll, it failed to update Vista's System Catalog with the file's new Signature Hash. When this happens Vista compares the two Signature Hashes and when they don't match, Vista's anti-piracy system thinks the critical system file has been tampered with and flags Vista as Non-Genuine.
To resolve your issue, we need to get the file's Signature Hash to match what is listed in Vista System Catalog. I can provide a couple of suggestions to do this:
A) Uninstall Update KB945553:
1. Reboot Vista into Safe Mode
2. Go to Control Panel
3. On the left hand side of the Controlee panel window, Click on "Classic View"
4. Double-click "Programs and Features"
5. On the left hand side, under "Tasks" click "View installed updates"
6. Sort the updates by "Installed On" date
7. Find the Updates installed on (or after) April 8th
8. Find the Updated titled "Security Update for Windows Vista (KB945553)"
9. Right-Click on the Update and select "Uninstall"
10. Reboot into normal mode
11. Vista should no longer be in Reduced Functionality mode
12. You can manually reinstall Update KB945553 by going to http://www.microsoft.com/downloads/details.aspx?FamilyID=8203d303-c855-4579-9bbf-b06ddf5c1b87&DisplayLang=en click the "Download" button, then click "open" (if any other windows pop-up, click the 'Allow" or Continue" button.
13. When the update is complete, reboot the computer. When the computer reboots, you should see a screen that says something like "Configuring Update..." Do not turn off or reboot your computer until Vista has completed configuring the update.
B) Repair Windows using System Restore:
1. Reboot Vista into Safe Mode
2. Go to Control Panel
3. On the left hand side of the Controlee panel window, Click on "Classic View"
4. Double-click "Backup and Restore Center"
5. On the left hand side of the window, click "Repair Windows using system restore"
i. If the last thing that you installed was Update KB945553, then select the "Recommended Restore"
ii. If you have since installed other software, drivers or updates, then select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date you installed Update KB945553 (would be around April 8th or after).
6. Click the "Next" button.
7. Reboot back into Normal mode
8. Vista should no longer be in Reduced Functionality mode
9. You can manually reinstall Update KB945553 by going to http://www.microsoft.com/downloads/details.aspx?FamilyID=8203d303-c855-4579-9bbf-b06ddf5c1b87&DisplayLang=en click the "Download" button, then click "open" (if any other windows pop-up, click the 'Allow" or Continue" button.
10. When the update is complete, reboot the computer. When the computer reboots, you should see a screen that says something like "Configuring Update..." Do not turn off or reboot your computer until Vista has completed configuring the update.
If, after you reinstall the update, you re-experience the issue again, please go to the Windows Update Solution Center at http://support.microsoft.com/ph/6527#tab0 or create a (no cost) Windows Update support request at http://support.microsoft.com/oas/default.aspx?gprid=6527
Thank you,
Darin Smith
WGA Forum Manager
Tuesday, April 29, 2008 12:09 AM
All replies
-
Hello Bigtinhb,
The core to your particular issue centers on the line in your Diagnostic Report that reads:
File Scan Data-->
File Mismatch: C:\Windows\system32\dnsapi.dll[6.0.6000.16615]
This line means that the critical system file dnsapi.dll either
a) Has been tampered/modified/become corrupt to the point that its Signature Hash no longer matches the Signature Hash listed in Vista's System Catalog.
Or
b) The dnsapi.dll file has recently been updated but the file's Signature Hash was not updated, in Vista's System Catalog to reflect the updated dnsapi.dll file's new Signature Hash.
Vista compares a Critical System file's Signature Hash with the Signature Hash listed in its System Catalog to determine if that Critical System file has been tampered with.
In the case of the Critical System file dnsapi.dll, on April 8th 2008, Windows Update released Update KB945553. One of the things that this update did was to update Critical System file dnsapi.dll. We believe that, in some rare cases, after the Update updated dnsapi.dll, it failed to update Vista's System Catalog with the file's new Signature Hash. When this happens Vista compares the two Signature Hashes and when they don't match, Vista's anti-piracy system thinks the critical system file has been tampered with and flags Vista as Non-Genuine.
To resolve your issue, we need to get the file's Signature Hash to match what is listed in Vista System Catalog. I can provide a couple of suggestions to do this:
A) Uninstall Update KB945553:
1. Reboot Vista into Safe Mode
2. Go to Control Panel
3. On the left hand side of the Controlee panel window, Click on "Classic View"
4. Double-click "Programs and Features"
5. On the left hand side, under "Tasks" click "View installed updates"
6. Sort the updates by "Installed On" date
7. Find the Updates installed on (or after) April 8th
8. Find the Updated titled "Security Update for Windows Vista (KB945553)"
9. Right-Click on the Update and select "Uninstall"
10. Reboot into normal mode
11. Vista should no longer be in Reduced Functionality mode
12. You can manually reinstall Update KB945553 by going to http://www.microsoft.com/downloads/details.aspx?FamilyID=8203d303-c855-4579-9bbf-b06ddf5c1b87&DisplayLang=en click the "Download" button, then click "open" (if any other windows pop-up, click the 'Allow" or Continue" button.
13. When the update is complete, reboot the computer. When the computer reboots, you should see a screen that says something like "Configuring Update..." Do not turn off or reboot your computer until Vista has completed configuring the update.
B) Repair Windows using System Restore:
1. Reboot Vista into Safe Mode
2. Go to Control Panel
3. On the left hand side of the Controlee panel window, Click on "Classic View"
4. Double-click "Backup and Restore Center"
5. On the left hand side of the window, click "Repair Windows using system restore"
i. If the last thing that you installed was Update KB945553, then select the "Recommended Restore"
ii. If you have since installed other software, drivers or updates, then select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date you installed Update KB945553 (would be around April 8th or after).
6. Click the "Next" button.
7. Reboot back into Normal mode
8. Vista should no longer be in Reduced Functionality mode
9. You can manually reinstall Update KB945553 by going to http://www.microsoft.com/downloads/details.aspx?FamilyID=8203d303-c855-4579-9bbf-b06ddf5c1b87&DisplayLang=en click the "Download" button, then click "open" (if any other windows pop-up, click the 'Allow" or Continue" button.
10. When the update is complete, reboot the computer. When the computer reboots, you should see a screen that says something like "Configuring Update..." Do not turn off or reboot your computer until Vista has completed configuring the update.
If, after you reinstall the update, you re-experience the issue again, please go to the Windows Update Solution Center at http://support.microsoft.com/ph/6527#tab0 or create a (no cost) Windows Update support request at http://support.microsoft.com/oas/default.aspx?gprid=6527
Thank you,
Darin Smith
WGA Forum Manager
Tuesday, April 29, 2008 12:09 AM -
Hello. I am having the same problem. Cannot boot vista home premium normally since April 8 update installed and have mismatch of several .dll's in vista wga diagnostic tool caused by KB945553, but can only boot in safe mode, sm with networking or sm with command prompt. I tried uninstalling the update in safe mode as you suggested in A) above, but get an installation error and cannot uninstall. I looked at solution B), but no system restore point available that will boot vista normally Are there "hidden" restore points that are earlier than those shown in the dialogs for system restore? I downloaded the "repaired" KB945553, but windows standalone installer will not launch in safe mode, so I'm stuck. I need to uninstall and reinstall the update, but can't do it in safe mode, even as administrator. Is there a way to manually uniinstall KB945553? What do you suggest?
Thank you.
Robert
Wednesday, April 30, 2008 5:50 AM