Windows 7 not genuine error and other problems began at the same time

Electroman · 17 Sep 2013

Code:

 
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BGR3G-46GXF-YRKKD
Windows Product Key Hash: TwisG3AshBexuszIulN9xuBNbNs=
Windows Product ID: 00371-OEM-9045262-42163
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {82A1386B-C5B0-4F1A-A6CC-117C583C93CD}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130801-1533
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{82A1386B-C5B0-4F1A-A6CC-117C583C93CD}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YRKKD</PKey><PID>00371-OEM-9045262-42163</PID><PIDType>3</PIDType><SID>S-1-5-21-2225676691-2243336110-4070549510</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1908</Version><SMBIOSVersion major="2" minor="7"/><Date>20130314000000.000000+000</Date></BIOS><HWID>8CAB3E07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46 
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 8:6:2013 18:50
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: NgAAAAMAAwABAAMAAQABAAAAAAABAAEAHKIg7Ohq4BpONGTHClN0xGC47uL6zz4c3ogyqJZj
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name OEMID Value OEMTableID Value
  APIC   ALASKA  A M I
  FACP   ALASKA  A M I
  HPET   ALASKA  A M I
  MCFG   ALASKA  A M I
  FPDT   ALASKA  A M I
  SSDT   SataRe  SataTabl
  BGRT   ALASKA  A M I
  SSDT   SataRe  SataTabl
  SSDT   SataRe  SataTabl

I am having the "Windows 7 not genuine" issue plus several other issues that all started when I logged on today. My system was also saying "Windows Explorer is restarting" about every 5 seconds until I disabled all Non-Microsoft shell extensions. Now I have the "not genuine" error and several devices not working (including NIC). I have ran various malware programs, sfc /scannow (couldn't repair), chkdsk /r, and everything else I could think of. I need help in a bad way. Thanks!

NoelDP · 17 Sep 2013

Please run the following command from an Elevated Command Prompt window(1)

Copy and paste set of commands below into the window – once completed, hit the Enter Key to ensure that the last command has run (2)

REG QUERY HKU
REG QUERY HKU\S-1-5-20
REG QUERY HKU\S-1-5-20\Environment
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20"
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList"

Copy the whole output to your response(3)

Here are some instructions to make life easier :)

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.

2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

Electroman · 17 Sep 2013

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Darin>REG QUERY HKU
HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-21-2225676691-2243336110-4070549510-1000
HKEY_USERS\S-1-5-18
C:\Users\Darin>REG QUERY HKU\S-1-5-20
ERROR: The system was unable to find the specified registry key or value.
C:\Users\Darin>REG QUERY HKU\S-1-5-20\Environment
ERROR: The system was unable to find the specified registry key or value.
C:\Users\Darin>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prof
ileList\S-1-5-20"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-20
ProfileImagePath REG_EXPAND_SZ C:\Windows\ServiceProfiles\NetworkServi
ce
Flags REG_DWORD 0x0
State REG_DWORD 0x0

C:\Users\Darin>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prof
ileList"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
ProfilesDirectory REG_EXPAND_SZ %SystemDrive%\Users
Default REG_EXPAND_SZ %SystemDrive%\Users\Default
Public REG_EXPAND_SZ %SystemDrive%\Users\Public
ProgramData REG_EXPAND_SZ %SystemDrive%\ProgramData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-18
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-19
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-20
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-21-2225676691-2243336110-4070549510-1000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-21-2225676691-2243336110-4070549510-1001
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-21-2225676691-2243336110-4070549510-1002
C:\Users\Darin>

Here are the results. Thank You for the help!

Electroman · 17 Sep 2013

FWIW, I have used a reg cleaner trying to correct this problem, but I exported the registry keys (hopefully) prior to running the cleaner software. Thanks

NoelDP · 17 Sep 2013

Please UNDO anything that the registry cleaner did, and UNINSTALL it!
There is no such thing as a 'good' registry cleaner - they are all dangerous, and WILL sooner or later trash your machine.

Are you running with UAC disabled?
Did you run that set of commands from an ELEVATED Command prompt? - if not, please do so.

Electroman · 17 Sep 2013

That is the 1st time I've ever let an app automatically change the reg. Never have trusted them. I did run the commands from elevated cmd prompt. FYI, I just noticed a new message in the notification area that said windows had changed & needed to be reinstalled. Do I restore the registry in Safe mode? When I backed it up, I exported (within the registry editor) each registry folder to the hard drive & removable usb drive. Thanks again for your help!!!

NoelDP · 17 Sep 2013

You're probably best using System Restore (restoring to a date prior to the registry changes), unless the 'cleaner' has a backup/restore system.

Don't worry about the reinstallation notice - we can almost always avoid this.

Electroman · 17 Sep 2013

Thanks. I entered System Restore from "Normal" mode and selected a restore point prior to running Ccleaner. Like my prior attempts (from every possible mode) I get an error when the system comes back up that Restore did not complete successfully. It failed while scanning the file system on C:\ and suggested chkdsk /r ...which I have done several times (also from Normal Mode & Safe Mode). I have tried multiple restore points. Thanks again!

NoelDP · 17 Sep 2013

Ccleaner is one of the less likely to cause problems - just don't use the registry cleaner part of it in future, please :)

OK - let's work on the basis that what we've seen is 'real' in your report....

I've uploaded a file - hku20.zip - to my SkyDrive at Noel's SkyDrive

Pleasedownload and save it to your desktop.

Right-clickon the saved file and select Extract all...

Saveit to the default location

Thisshould create a file hku20.reg

right-clickon the file, and select Merge

Acceptthe warnings, - you should then get a 'Success' message.

Closeall windows, and reboot.

Runanother MGADiag report, and post the results.

Electroman · 17 Sep 2013

I get error accessing the registry in Normal & Safe mode. I am not a "Windows Guru" by any means, but I have worked as a small town hardware tech for about 15 years. If there's anything that I can try without doing a clean install...I'm game. I have my other business files on this (Real Estate) which includes some proprietary software that will cost $$$ to reinstall--not to mention days of work. I really appreciate all of your help here!!!