Solved Windows 7 not genuine error and other problems began at the same time

[Electroman]

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BGR3G-46GXF-YRKKD
Windows Product Key Hash: TwisG3AshBexuszIulN9xuBNbNs=
Windows Product ID: 00371-OEM-9045262-42163
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {82A1386B-C5B0-4F1A-A6CC-117C583C93CD}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130801-1533
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{82A1386B-C5B0-4F1A-A6CC-117C583C93CD}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YRKKD</PKey><PID>00371-OEM-9045262-42163</PID><PIDType>3</PIDType><SID>S-1-5-21-2225676691-2243336110-4070549510</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1908</Version><SMBIOSVersion major="2" minor="7"/><Date>20130314000000.000000+000</Date></BIOS><HWID>8CAB3E07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46 
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 8:6:2013 18:50
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: NgAAAAMAAwABAAMAAQABAAAAAAABAAEAHKIg7Ohq4BpONGTHClN0xGC47uL6zz4c3ogyqJZj
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name OEMID Value OEMTableID Value
  APIC   ALASKA  A M I
  FACP   ALASKA  A M I
  HPET   ALASKA  A M I
  MCFG   ALASKA  A M I
  FPDT   ALASKA  A M I
  SSDT   SataRe  SataTabl
  BGRT   ALASKA  A M I
  SSDT   SataRe  SataTabl
  SSDT   SataRe  SataTabl

I am having the "Windows 7 not genuine" issue plus several other issues that all started when I logged on today. My system was also saying "Windows Explorer is restarting" about every 5 seconds until I disabled all Non-Microsoft shell extensions. Now I have the "not genuine" error and several devices not working (including NIC). I have ran various malware programs, sfc /scannow (couldn't repair), chkdsk /r, and everything else I could think of. I need help in a bad way. Thanks!

 

[NoelDP]

Please run the following command from an Elevated Command Prompt window(1)



Copy and paste set of commands below into the window – once completed, hit the Enter Key to ensure that the last command has run (2)



REG QUERY HKU
REG QUERY HKU\S-1-5-20
REG QUERY HKU\S-1-5-20\Environment
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20"
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList"



Copy the whole output to your response(3)



Here are some instructions to make life easier

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.

2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[Electroman]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Darin>REG QUERY HKU
HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-21-2225676691-2243336110-4070549510-1000
HKEY_USERS\S-1-5-18
C:\Users\Darin>REG QUERY HKU\S-1-5-20
ERROR: The system was unable to find the specified registry key or value.
C:\Users\Darin>REG QUERY HKU\S-1-5-20\Environment
ERROR: The system was unable to find the specified registry key or value.
C:\Users\Darin>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prof
ileList\S-1-5-20"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-20
ProfileImagePath REG_EXPAND_SZ C:\Windows\ServiceProfiles\NetworkServi
ce
Flags REG_DWORD 0x0
State REG_DWORD 0x0

C:\Users\Darin>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prof
ileList"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
ProfilesDirectory REG_EXPAND_SZ %SystemDrive%\Users
Default REG_EXPAND_SZ %SystemDrive%\Users\Default
Public REG_EXPAND_SZ %SystemDrive%\Users\Public
ProgramData REG_EXPAND_SZ %SystemDrive%\ProgramData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-18
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-19
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-20
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-21-2225676691-2243336110-4070549510-1000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-21-2225676691-2243336110-4070549510-1001
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-21-2225676691-2243336110-4070549510-1002
C:\Users\Darin>


Here are the results. Thank You for the help!

 

[Electroman]

FWIW, I have used a reg cleaner trying to correct this problem, but I exported the registry keys (hopefully) prior to running the cleaner software. Thanks

 

[NoelDP]

Please UNDO anything that the registry cleaner did, and UNINSTALL it!
There is no such thing as a 'good' registry cleaner - they are all dangerous, and WILL sooner or later trash your machine.

Are you running with UAC disabled?
Did you run that set of commands from an ELEVATED Command prompt? - if not, please do so.

 

[Electroman]

That is the 1st time I've ever let an app automatically change the reg. Never have trusted them. I did run the commands from elevated cmd prompt. FYI, I just noticed a new message in the notification area that said windows had changed & needed to be reinstalled. Do I restore the registry in Safe mode? When I backed it up, I exported (within the registry editor) each registry folder to the hard drive & removable usb drive. Thanks again for your help!!!

 

[NoelDP]

You're probably best using System Restore (restoring to a date prior to the registry changes), unless the 'cleaner' has a backup/restore system.

Don't worry about the reinstallation notice - we can almost always avoid this.

 

[Electroman]

Thanks. I entered System Restore from "Normal" mode and selected a restore point prior to running Ccleaner. Like my prior attempts (from every possible mode) I get an error when the system comes back up that Restore did not complete successfully. It failed while scanning the file system on C:\ and suggested chkdsk /r ...which I have done several times (also from Normal Mode & Safe Mode). I have tried multiple restore points. Thanks again!

 

[NoelDP]

Ccleaner is one of the less likely to cause problems - just don't use the registry cleaner part of it in future, please

OK - let's work on the basis that what we've seen is 'real' in your report....




I've uploaded a file - hku20.zip - to my SkyDrive at Noel's SkyDrive

Pleasedownload and save it to your desktop.

Right-clickon the saved file and select Extract all...

Saveit to the default location

Thisshould create a file hku20.reg



right-clickon the file, and select Merge

Acceptthe warnings, - you should then get a 'Success' message.

Closeall windows, and reboot.



Runanother MGADiag report, and post the results.

 

[Electroman]

I get error accessing the registry in Normal & Safe mode. I am not a "Windows Guru" by any means, but I have worked as a small town hardware tech for about 15 years. If there's anything that I can try without doing a clean install...I'm game. I have my other business files on this (Real Estate) which includes some proprietary software that will cost $$$ to reinstall--not to mention days of work. I really appreciate all of your help here!!!

 

[NoelDP]

What's the EXACT error you get when attempting the merge?
What problems do you have accessing the registry?

 

[Electroman]

The error is: "Cannot import C:\Users\Desktop\hku20.reg: Error accessing the registry." That's all it says with no option to display more details. I was thinking possibly crapware or corruption maybe?

 

[Electroman]

I just found a log file from a virus removal tool I ran in August. It lists each physical drive...then MBR & some numbers...then Bsp & some numbers and then some stuff about the partition tables. That is just FYI in case any of it would help. Thanks!!

 

[NoelDP]

That error could be for a number of reasons - probably permissions problems.

Please open Regedit

In the left pane, navigate to the
HKEY_USERS
Key, and find the
S-1-5-20
subkey - right-click on it
Select Permissions

What usernames are showing?
What rights does each user have (highlight each username in turn)?
do NOT change anything at this point!

Once you have the data, close regedit, and post back.

 

[Electroman]

I don't have S-1-5-20. Under Users I have .DEFAULT, S-1-5-18, S-1-5-19, AND S-1-5-21-2225676691...and the number continues

 

[NoelDP]

OK - check the permissions on the HKU Key itself, then

 

[Electroman]

Ok. Permissions are as follows: Everyone=Read RESTRICTED=Read System=Full Control & Read Administrators=Full Control & Read

Thanks!

 

[NoelDP]

That's normal-ish
You need to add another account.

go back into the Permissions on that Key, and hit the Advanced button

In the Permissions tab, click on 'Add'
In the box type
NETWORK SERVICE
Click on Check Names - the NETWORK SERICE in the box should be accepted and underlined
Now click OK (once)
Highlight the NETWORK SERVICE entry in the box, and click Edit

put a tick in the Allow/Full Control box.
Click OK out to Regedit, and reboot twice

now run another MGADiag report, and post the new results.

Also, run the following commands again, and post their results..

REG QUERY HKU
REG QUERY HKU\S-1-5-20

 

[Electroman]

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BGR3G-46GXF-YRKKD
Windows Product Key Hash: TwisG3AshBexuszIulN9xuBNbNs=
Windows Product ID: 00371-OEM-9045262-42163
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {82A1386B-C5B0-4F1A-A6CC-117C583C93CD}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130801-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{82A1386B-C5B0-4F1A-A6CC-117C583C93CD}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YRKKD</PKey><PID>00371-OEM-9045262-42163</PID><PIDType>3</PIDType><SID>S-1-5-21-2225676691-2243336110-4070549510</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1908</Version><SMBIOSVersion major="2" minor="7"/><Date>20130314000000.000000+000</Date></BIOS><HWID>8CAB3E07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 8:6:2013 18:50
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: NgAAAAMAAwABAAMAAQABAAAAAAABAAEAHKIg7Ohq4BpONGTHClN0xGC47uL6zz4c3ogyqJZj
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
FPDT ALASKA A M I
SSDT SataRe SataTabl
BGRT ALASKA A M I
SSDT SataRe SataTabl
SSDT SataRe SataTabl




Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Darin>REG QUERY HKU
HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-21-2225676691-2243336110-4070549510-1000
HKEY_USERS\S-1-5-18
C:\Users\Darin>REG QUERY HKU\S-1-5-20
ERROR: The system was unable to find the specified registry key or value.
C:\Users\Darin>

 

[NoelDP]

Still nothing....

perhaps it's the filesystem at fault then...
Please run the following commands, and post the results.

DIR C:\Windows\ServiceProfiles\NetworkService
ICACLS C:\Windows\ServiceProfiles\NetworkService
ICACLS C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT