none
An Unauthorised change was made to windows

    Question

  • Hello Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Status: Invalid License Validation Code: 50 Cached Online Validation Code: N/A, hr = 0xc004d401 Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7 Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw= Windows Product ID: 89583-OEM-7359902-56304 Windows Product ID Type: 3 Windows License Type: OEM System Builder Windows OS version: 6.0.6001.2.00010300.1.0.003 ID: {2C24CD60-1F16-4736-A7A7-B3BEB4BF5D5A}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows Vista (TM) Home Premium Architecture: 0x00000009 Build lab: 6001.longhorn_rtm.080118-1840 TTS Error: M:20111026230634777- Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32) Default Browser: C:\Program Files (x86)\Opera\Opera.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{2C24CD60-1F16-4736-A7A7-B3BEB4BF5D5A}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HQWH7</PKey><PID>89583-OEM-7359902-56304</PID><PIDType>3</PIDType><SID>S-1-5-21-376027235-3601902805-3664059043</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EX58-UD5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20090511000000.000000+000</Date></BIOS><HWID>73333507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Asia Standard Time(GMT+06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 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 Licensing Data--> C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401 Windows Activation Technologies--> N/A HWID Data--> HWID Hash Current: NgAAAAIABAABAAEAAQABAAAAAgABAAEAonbEuncWcs0MNeS/hDRGvH6fQLTy9PKurFbfV+qC OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes, but no SLIC table Windows marker version: N/A OEMID and OEMTableID Consistent: N/A BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC GBT GBTUACPI FACP GBT GBTUACPI HPET GBT GBTUACPI MCFG GBT GBTUACPI EUDS GBT TAMG GBT GBT B0 SSDT INTEL PPM RCM
    Wednesday, October 26, 2011 5:14 PM

Answers

  • Hello,

    after having reinstalled windows, I have updated to service pack2. Avast is running no sign of problems yet. Problem solved it seems. If the problem come back I will uninstall avast antivirius

    diagnostic report below

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7
    Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw=
    Windows Product ID: 89583-OEM-7359902-56304
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {EF851BEF-1BCA-4070-8C19-D25073A4CF53}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000009
    Build lab: 6002.vistasp2_gdr.110617-0336
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Opera\Opera.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{EF851BEF-1BCA-4070-8C19-D25073A4CF53}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HQWH7</PKey><PID>89583-OEM-7359902-56304</PID><PIDType>3</PIDType><SID>S-1-5-21-695892601-1531970932-3989029076</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EX58-UD5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20090511000000.000000+000</Date></BIOS><HWID>CE323507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Asia Standard Time(GMT+06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomePremium edition
    Description: Windows Operating System - Vista, OEM_COA_NSLP channel
    Activation ID: f3acdd3c-119a-4932-a3d7-0b6f33a1dca9
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89583-00146-599-056304-02-1033-6001.0000-2992011
    Installation ID: 016082732825495856299920157384572503123585159791054872
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: HQWH7
    License Status: Licensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: NgAAAAIABAABAAEAAQABAAAAAgABAAEAonbEuncWcs0MNeS/hDRGvH6fQLTy9PKurFbfV+qC

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   GBT     GBTUACPI
      FACP   GBT     GBTUACPI
      HPET   GBT     GBTUACPI
      MCFG   GBT     GBTUACPI
      EUDS   GBT     
      TAMG   GBT     GBT   B0
      SSDT   INTEL  PPM RCM

     

    Friday, October 28, 2011 8:05 PM

All replies

  • will post the diagnostic report again, so that it is easier understand. I am writing this from a differrent pc
    Wednesday, October 26, 2011 6:15 PM
  • "HolyTarkan" wrote in message news:feb5b9ab-ea60-496c-8c70-eac5207074e0...
    Hello Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Status: Invalid License Validation Code: 50 Cached Online Validation Code: N/A, hr = 0xc004d401 Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7 Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw= Windows Product ID: 89583-OEM-7359902-56304 Windows Product ID Type: 3 Windows License Type: OEM System Builder Windows OS version: 6.0.6001.2.00010300.1.0.003
     
    Licensing Data--> C:\Windows\system32\slmgr.vbs(1634, 5) (null): 0xC004D401 
     
     
     
    Please stick to the one thread!
    Your system is still showing major problems.
    Your problem is that you have a Mod-Auth Tamper present.
    Recently, such problems have only appeared when Avast Anti-Virus is installed
     
    If you have Avast installed, I suggest that you follow the advice in the following post.
    If you do not have Avast – or following that advice does not work, then please let us know, and we’ll try another approach.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Wednesday, October 26, 2011 9:26 PM
    Wednesday, October 26, 2011 6:24 PM
    Moderator
  • Hello,

    I am reinstalling windows with a new antivirus.

    • Proposed as answer by Darin Smith MS Thursday, October 27, 2011 10:38 PM
    Wednesday, October 26, 2011 7:23 PM
  • Hello,

    after having reinstalled windows, I have updated to service pack2. Avast is running no sign of problems yet. Problem solved it seems. If the problem come back I will uninstall avast antivirius

    diagnostic report below

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7
    Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw=
    Windows Product ID: 89583-OEM-7359902-56304
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {EF851BEF-1BCA-4070-8C19-D25073A4CF53}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000009
    Build lab: 6002.vistasp2_gdr.110617-0336
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Opera\Opera.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{EF851BEF-1BCA-4070-8C19-D25073A4CF53}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HQWH7</PKey><PID>89583-OEM-7359902-56304</PID><PIDType>3</PIDType><SID>S-1-5-21-695892601-1531970932-3989029076</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EX58-UD5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20090511000000.000000+000</Date></BIOS><HWID>CE323507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Asia Standard Time(GMT+06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomePremium edition
    Description: Windows Operating System - Vista, OEM_COA_NSLP channel
    Activation ID: f3acdd3c-119a-4932-a3d7-0b6f33a1dca9
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89583-00146-599-056304-02-1033-6001.0000-2992011
    Installation ID: 016082732825495856299920157384572503123585159791054872
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: HQWH7
    License Status: Licensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: NgAAAAIABAABAAEAAQABAAAAAgABAAEAonbEuncWcs0MNeS/hDRGvH6fQLTy9PKurFbfV+qC

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   GBT     GBTUACPI
      FACP   GBT     GBTUACPI
      HPET   GBT     GBTUACPI
      MCFG   GBT     GBTUACPI
      EUDS   GBT     
      TAMG   GBT     GBT   B0
      SSDT   INTEL  PPM RCM

     

    Friday, October 28, 2011 8:05 PM
  • "HolyTarkan" wrote in message news:06a5792e-aaae-4b81-bc42-2fec6d1c232e...

    Hello,

    after having reinstalled windows, I have updated to service pack2. Avast is running no sign of problems yet. Problem solved it seems. If the problem come back I will uninstall avast antivirius

    diagnostic report below

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-DFDHJ-BJFPV-HQWH7
    Windows Product Key Hash: xz0kkU+ATTOGB+yyDNIkypor+Tw=
    Windows Product ID: 89583-OEM-7359902-56304
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.0.6002.2.00010300.2.0.003

    Other data-->
    SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EX58-UD5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F7</Version><SMBIOSVersion major="2" minor="4"/><Date>20090511000000.000000+000</Date></BIOS

     

     

    That’s to be expected – although I never recommended a complete reinstall of the OS, it is indubitably a good way to go, especially if all data is properly backed up, and the installation is relatively clean.
     
    The report looks good now – good luck!
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, October 28, 2011 9:27 PM
    Moderator