Remove From My Forums

An Unauthorised change was made to windows

Question
0

Sign in to vote

Hello Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Status: Invalid License Validation Code: 50 Cached Online Validation Code: N/A, hr = 0xc004d401 Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7 Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw= Windows Product ID: 89583-OEM-7359902-56304 Windows Product ID Type: 3 Windows License Type: OEM System Builder Windows OS version: 6.0.6001.2.00010300.1.0.003 ID: {2C24CD60-1F16-4736-A7A7-B3BEB4BF5D5A}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows Vista (TM) Home Premium Architecture: 0x00000009 Build lab: 6001.longhorn_rtm.080118-1840 TTS Error: M:20111026230634777- Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32) Default Browser: C:\Program Files (x86)\Opera\Opera.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{2C24CD60-1F16-4736-A7A7-B3BEB4BF5D5A}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HQWH7</PKey><PID>89583-OEM-7359902-56304</PID><PIDType>3</PIDType><SID>S-1-5-21-376027235-3601902805-3664059043</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EX58-UD5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20090511000000.000000+000</Date></BIOS><HWID>73333507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Asia Standard Time(GMT+06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 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 Licensing Data--> C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401 Windows Activation Technologies--> N/A HWID Data--> HWID Hash Current: NgAAAAIABAABAAEAAQABAAAAAgABAAEAonbEuncWcs0MNeS/hDRGvH6fQLTy9PKurFbfV+qC OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes, but no SLIC table Windows marker version: N/A OEMID and OEMTableID Consistent: N/A BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC GBT GBTUACPI FACP GBT GBTUACPI HPET GBT GBTUACPI MCFG GBT GBTUACPI EUDS GBT TAMG GBT GBT B0 SSDT INTEL PPM RCM

Wednesday, October 26, 2011 5:14 PM

Answers

0

Sign in to vote
Hello,

after having reinstalled windows, I have updated to service pack2. Avast is running no sign of problems yet. Problem solved it seems. If the problem come back I will uninstall avast antivirius

diagnostic report below

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Genuine
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7
Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw=
Windows Product ID: 89583-OEM-7359902-56304
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.0.6002.2.00010300.2.0.003
ID: {EF851BEF-1BCA-4070-8C19-D25073A4CF53}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000009
Build lab: 6002.vistasp2_gdr.110617-0336
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Opera\Opera.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{EF851BEF-1BCA-4070-8C19-D25073A4CF53}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HQWH7</PKey><PID>89583-OEM-7359902-56304</PID><PIDType>3</PIDType><SID>S-1-5-21-695892601-1531970932-3989029076</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EX58-UD5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20090511000000.000000+000</Date></BIOS><HWID>CE323507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Asia Standard Time(GMT+06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.0.6002.18005
Name: Windows(TM) Vista, HomePremium edition
Description: Windows Operating System - Vista, OEM_COA_NSLP channel
Activation ID: f3acdd3c-119a-4932-a3d7-0b6f33a1dca9
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 89583-00146-599-056304-02-1033-6001.0000-2992011
Installation ID: 016082732825495856299920157384572503123585159791054872
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
Partial Product Key: HQWH7
License Status: Licensed

Windows Activation Technologies-->
N/A

HWID Data-->
HWID Hash Current: NgAAAAIABAABAAEAAQABAAAAAgABAAEAonbEuncWcs0MNeS/hDRGvH6fQLTy9PKurFbfV+qC

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC   GBT     GBTUACPI
FACP   GBT     GBTUACPI
HPET   GBT     GBTUACPI
MCFG   GBT     GBTUACPI
EUDS   GBT
TAMG   GBT     GBT   B0
SSDT   INTEL  PPM RCM
- Marked as answer by Darin Smith MS Friday, October 28, 2011 8:58 PM
Friday, October 28, 2011 8:05 PM

All replies

0

Sign in to vote

will post the diagnostic report again, so that it is easier understand. I am writing this from a differrent pc

Wednesday, October 26, 2011 6:15 PM
1

Sign in to vote
"HolyTarkan" wrote in message news:feb5b9ab-ea60-496c-8c70-eac5207074e0...

Hello Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Status: Invalid License Validation Code: 50 Cached Online Validation Code: N/A, hr = 0xc004d401 Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7 Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw= Windows Product ID: 89583-OEM-7359902-56304 Windows Product ID Type: 3 Windows License Type: OEM System Builder Windows OS version: 6.0.6001.2.00010300.1.0.003

Licensing Data--> C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401

Please stick to the one thread!

Your system is still showing major problems.

Your problem is that you have a Mod-Auth Tamper present.

Recently, such problems have only appeared when Avast Anti-Virus is installed

If you have Avast installed, I suggest that you follow the advice in the following post.

http://social.microsoft.com/Forums/en-US/genuinevista/thread/E2F066B3-2517-41BC-8FAD-4C036F2F4AC8

If you do not have Avast – or following that advice does not work, then please let us know, and we’ll try another approach.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Proposed as answer by Darin Smith MS Wednesday, October 26, 2011 9:26 PM
Wednesday, October 26, 2011 6:24 PM

Moderator
0

Sign in to vote
Hello,

I am reinstalling windows with a new antivirus.
- Proposed as answer by Darin Smith MS Thursday, October 27, 2011 10:38 PM
Wednesday, October 26, 2011 7:23 PM
0

Sign in to vote
Hello,

after having reinstalled windows, I have updated to service pack2. Avast is running no sign of problems yet. Problem solved it seems. If the problem come back I will uninstall avast antivirius

diagnostic report below

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Genuine
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7
Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw=
Windows Product ID: 89583-OEM-7359902-56304
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.0.6002.2.00010300.2.0.003
ID: {EF851BEF-1BCA-4070-8C19-D25073A4CF53}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000009
Build lab: 6002.vistasp2_gdr.110617-0336
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Opera\Opera.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{EF851BEF-1BCA-4070-8C19-D25073A4CF53}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HQWH7</PKey><PID>89583-OEM-7359902-56304</PID><PIDType>3</PIDType><SID>S-1-5-21-695892601-1531970932-3989029076</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EX58-UD5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20090511000000.000000+000</Date></BIOS><HWID>CE323507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Asia Standard Time(GMT+06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.0.6002.18005
Name: Windows(TM) Vista, HomePremium edition
Description: Windows Operating System - Vista, OEM_COA_NSLP channel
Activation ID: f3acdd3c-119a-4932-a3d7-0b6f33a1dca9
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 89583-00146-599-056304-02-1033-6001.0000-2992011
Installation ID: 016082732825495856299920157384572503123585159791054872
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
Partial Product Key: HQWH7
License Status: Licensed

Windows Activation Technologies-->
N/A

HWID Data-->
HWID Hash Current: NgAAAAIABAABAAEAAQABAAAAAgABAAEAonbEuncWcs0MNeS/hDRGvH6fQLTy9PKurFbfV+qC

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC   GBT     GBTUACPI
FACP   GBT     GBTUACPI
HPET   GBT     GBTUACPI
MCFG   GBT     GBTUACPI
EUDS   GBT
TAMG   GBT     GBT   B0
SSDT   INTEL  PPM RCM
- Marked as answer by Darin Smith MS Friday, October 28, 2011 8:58 PM
Friday, October 28, 2011 8:05 PM
0

Sign in to vote

"HolyTarkan" wrote in message news:06a5792e-aaae-4b81-bc42-2fec6d1c232e...

Hello,

after having reinstalled windows, I have updated to service pack2. Avast is running no sign of problems yet. Problem solved it seems. If the problem come back I will uninstall avast antivirius

diagnostic report below

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Genuine
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7
Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw=
Windows Product ID: 89583-OEM-7359902-56304
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.0.6002.2.00010300.2.0.003

Other data-->
SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EX58-UD5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20090511000000.000000+000</Date></BIOS

That’s to be expected – although I never recommended a complete reinstall of the OS, it is indubitably a good way to go, especially if all data is properly backed up, and the installation is relatively clean.

The report looks good now – good luck!

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Friday, October 28, 2011 9:27 PM

Moderator

Answered by:

An Unauthorised change was made to windows

Question

Answers

All replies