Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows "not genuine" but can't run legitcheck.hta - HELP!

23 Apr 2015   #1
ship691

Windows 7 x64 Professional (SP1)
 
 
Windows "not genuine" but can't run legitcheck.hta - HELP!

Hi

My Windows 7 x64 is legit.

However a couple of days ago a message popped up sayint that it isn't. (i.e. "This copy of Windows is not genuine" or something similar.)

Now the only way I can get into windows is via Safe Mode (using F8 during boot).

It asks me to prove it is legit by downloading legitcheck.hta. However when I try to run that file I get a message saying that "legitcheck.hta is not a valid Win32 application"

I just managed to run Malwarebyte Anti-Malware Home (Premium) v2.1.4.1018 (safe mode), but it found no malware.

My normal anti-viral software is AGV Cloudcare.

My Windows 7 is Build 7601

When I attempt a normal boot, the screen is black apart form a Windows Activation window has the error message "OxC004F009" at the bottom of the screen.


Do I have malware?
Has Microsoft release a dodgy patch?
Why cant it run legitcheck.hta (which does appear to come from microsoft.com)
What should I do next?
Should I phone microsoft?

Many thanks

J


Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x8007043c
Windows Product Key: *****-*****-V9927-V68FX-PKJVQ
Windows Product Key Hash: sgMpz9msfkkcRsyp5CLuCh8a1Vc=
Windows Product ID: 00371-OEM-9044202-90070
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {5673C385-BB15-4915-BE33-E2B598435A5D}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150316-1654
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5673C385-BB15-4915-BE33-E2B598435A5D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-PKJVQ</PKey><PID>00371-OEM-9044202-90070</PID><PIDType>3</PIDType><SID>S-1-5-21-163801654-3582672073-2290200179</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>WBIBX10J</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>WBIBX10J.86A.0333.2012.0129.2308</Version><SMBIOSVersion major="2" minor="6"/><Date>20120129000000.000000+000</Date></BIOS><HWID>F5833107018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007043C' to display the error text.
Error: 0x8007043C

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Not Registered - 0x8007043c
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEABAABAAEAAAAAAAAAAQABAAEAln16IZIrgJYyiELG5rNs3dboPv12Vg==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INTEL WBIBX10J
FACP INTEL WBIBX10J
HPET INTEL WBIBX10J
MCFG INTEL WBIBX10J
WDDT INTEL WBIBX10J
ASF! INTEL WBIBX10J
ASPT INTEL WBIBX10J
WDTT INTEL WBIBX10J
SSDT INTEL SSDT PM


My System SpecsSystem Spec
.
23 Apr 2015   #2
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

The above report was produced while in Safe Mode - and is pretty much useless.
When attempting to validate, you should go to www.microsoft/genuine/validate using Internet Explorer - this avoids having to use the legitcheck process. (which won't work in Safe Mode anyhow - although I'm not certain that the normal method will work anyhow, as I've never tried it!)

You need to be able to boot to Normal mode before attempting to diagnose anything.
The non-genuine notification does NOT prevent access to Normal Mode Windows - if you are unable to access Normal Mode, tehn you have other problems as well.

You should first attempt a System Restore back to a point where the system was running 'normally' and see if that helps.
Then start diagnosis if necessary.
My System SpecsSystem Spec
23 Apr 2015   #3
ship691

Windows 7 x64 Professional (SP1)
 
 

System Restore "did not complete successfully". It said it may have been to do with anti-viral software still running, so I set AVG to be off for 15 mins and tried again.

This time it said "System Restore did not complete successfully, your computer's system files and settings were not changed"

I'll get more details and revert this thread from other PC.

OK here you go:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-V9927-V68FX-PKJVQ
Windows Product Key Hash: sgMpz9msfkkcRsyp5CLuCh8a1Vc=
Windows Product ID: 00371-OEM-9044202-90070
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {5673C385-BB15-4915-BE33-E2B598435A5D}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150316-1654
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5673C385-BB15-4915-BE33-E2B598435A5D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-PKJVQ</PKey><PID>00371-OEM-9044202-90070</PID><PIDType>3</PIDType><SID>S-1-5-21-163801654-3582672073-2290200179</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>WBIBX10J</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>WBIBX10J.86A.0333.2012.0129.2308</Version><SMBIOSVersion major="2" minor="6"/><Date>20120129000000.000000+000</Date></BIOS><HWID>F5833107018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00180-442-090070-02-2057-7601.0000-0982015
Installation ID: 015930749404926972400223239211251513150260111726145605
Processor Certificate URL: SpcService Web Service
Machine Certificate URL: RacService Web Service
Use License URL: UseLicenseService Web Service
Product Key Certificate URL: PkcService Web Service
Partial Product Key: PKJVQ
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 23/04/2015 12:59:59

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: NgAAAAEABAABAAEAAAAEAAAAAQABAAEAln16IZIrgJYyiELG5rNs3dboYj1cOr1+E+Q+/XZW

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INTEL WBIBX10J
FACP INTEL WBIBX10J
HPET INTEL WBIBX10J
MCFG INTEL WBIBX10J
WDDT INTEL WBIBX10J
ASF! INTEL WBIBX10J
ASPT INTEL WBIBX10J
WDTT INTEL WBIBX10J
SSDT INTEL SSDT PM
My System SpecsSystem Spec
.

23 Apr 2015   #4
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

There's no problem in the MGADiag report - although it does appear that the install has never been validated.
Attempt validation at www.microsoft/genuine/validate using Internet Explorer - what happens?
My System SpecsSystem Spec
23 Apr 2015   #5
ship691

Windows 7 x64 Professional (SP1)
 
 

I tried an earlier restore point. It seemed to get further this time during System Restore however it is still complaining about not being able to access a file. This was depite my having AVG disabled and SuperAntiSpyware and DropBox/Teamviewer/Ditto also closed.


Error: 0x80070005

P.S.
> Attempt validation at www.microsoft/genuine/validate using Internet Explorer - what happens?
It says "Validation Status: Action Required"
But I still cant run legitcheck.hta because "it is not a valid Win32 application" :^(


PPS
I tried opening rather than saving to run and now it is offering me a free copy of Microsoft Security Essentials. Should I run this? (I am nervous because i already have AVG running and thought that it is bad to run more than one antivirus software...)

At least it is no longer saying that my Windows is not legit but I am now worried about malware.
My System SpecsSystem Spec
23 Apr 2015   #6
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

That error code is an 'Access Denied' one
You may have better luck attempting a System Restore either from Safe Mode, or from the 'Repair my Computer' option in the Advanced Boot Menu.

The fact that you were offered MSE means that validation passed!
You do NOT want to install it unless you first uninstall AVG - it's never a good idea to have two active AV apps installed, and an even worse idea to have both active!
My System SpecsSystem Spec
23 Apr 2015   #7
ship691

Windows 7 x64 Professional (SP1)
 
 

Nope - System Restore from Safe Mode failed too.
Wait do I need to hit f8 when it reboots AFTER the system restore too?

J

EDIT:
Nope I tried that too. I booted into Safe Mode, ran System Restore and hit F9 as it rebooted to take it back into Safe Mode. However I still got: "System Restore could not access a file" and "did not complete successfully." 0x80070005.

I was trying the oldest of my available dates for System Restore. Now what?

Is there any better way to test for Malware?

Btw, I am now pretty sure I have malware because it fired up some porn site I've never seen when I tried to got to a forum about lawn mowers ! :^[
My System SpecsSystem Spec
23 Apr 2015   #8
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

You shouldn't need to.
Try it again from Repair My Computer
My System SpecsSystem Spec
23 Apr 2015   #9
ship691

Windows 7 x64 Professional (SP1)
 
 

If I hit F8 during boot, one of the options is Repair Your Computer. I am assuming that is what you mean, yes?

EDIT:
OK yes, that gives additional dates. Although I had to attach my backup HD in order for them to be found! Trying now

EDIT02:
My first attempt from backup HD took a long time (20mins?) and then failed with the exact same message as before. OK I'm going back to the 4th of Jan this year. If I go back much further I may as well re-install windows from scratch. (It's just such a monumental disruption that maybe i should buy an upgrade to Window 8.1 in fact.... [groan])

EDIT03
OMG, okay this time it took well over an hour to run system restore by I still get "An unspecified error during system restore (0x8007700b7)

Now what?
My System SpecsSystem Spec
23 Apr 2015   #10
ship691

Windows 7 x64 Professional (SP1)
 
 

Wait - you couldn't make this stuff up.

I just rebooted and came back saying that it HAS successfully run system restore - restored to that date I chose!

What should I do next - esp to check for malware... ?
(Should I run e.g. Windows Update? Microsoft malicious software removal tool ?)
My System SpecsSystem Spec
Reply

 Windows "not genuine" but can't run legitcheck.hta - HELP!




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
"Windows is not genuine" error, computer extremely slow and freezes
Hello, I could really use some help. Yesterday, I booted up my computer just like any other day, and it took forever to boot up (got stuck at the welcome screen and then at the desktop before the icons and start menu showed up). Within 5 minutes, the computer froze and was completely...
Windows Updates & Activation
How do I stop W7 "calling home" and displaying "not genuine" messages?
MS thinks that one of my PCs is running W7 that's not genuine. It is genuine - at least I bought it from Amazon and paid 141 for it so that - to me - means it's genuine. It may not be but neither Amazon nor MS will take any responsibility for it not being genuine so I've given up with them both. I...
Windows Updates & Activation
Cannot access user accounts after months of "not genuine" windows
Hi, This is my first post... I bought a PC from a website years ago, Cube24/7, in a bit of a rush. The website in retrospect was a bit dodgy, and based on other reviews of the site, I am lucky I got something for my money at all! It was stated to have Windows 7 on it - which turned out to...
Windows Updates & Activation
Cloned disk results in msg "This copy of windows is not genuine"
Hi, I have a two-week old, custom built desktop with a genuine OEM version of Windows 7, operating Office 2010. The 'system' sits on an internal SSD and all my documents and files sit on a separate internal disk. One aspect of my backup and recovery strategy is to create a clone of both disks...
Windows Updates & Activation
"Windows 7 Build 7601 not genuine" intermittently popping up
I'm working on this for someone else - we have a genuine copy of Windows 7 Pro that is coming up with this error, but only about once a week does it pop up... then the computer is restarted, and all is ok. When I ran the validation (Genuine Microsoft Software) I get "Because Windows installed on...
Windows Updates & Activation
MGADiag report - "This Computer is not running genuine Windows"
Always getting "This Computer is not running genuine Windows" error message. Posted MGADiag report below. Any help would be greatly appreciated. Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE22 Cached...
Windows Updates & Activation


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:54.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App