Windows "not genuine" but can't run legitcheck.hta - HELP!

Hi

My Windows 7 x64 is legit.

However a couple of days ago a message popped up sayint that it isn't. (i.e. "This copy of Windows is not genuine" or something similar.)

Now the only way I can get into windows is via Safe Mode (using F8 during boot).

It asks me to prove it is legit by downloading legitcheck.hta. However when I try to run that file I get a message saying that "legitcheck.hta is not a valid Win32 application"

I just managed to run Malwarebyte Anti-Malware Home (Premium) v2.1.4.1018 (safe mode), but it found no malware.

My normal anti-viral software is AGV Cloudcare.

My Windows 7 is Build 7601

When I attempt a normal boot, the screen is black apart form a Windows Activation window has the error message "OxC004F009" at the bottom of the screen.


Do I have malware?
Has Microsoft release a dodgy patch?
Why cant it run legitcheck.hta (which does appear to come from microsoft.com)
What should I do next?
Should I phone microsoft?

Many thanks

J


Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x8007043c
Windows Product Key: *****-*****-V9927-V68FX-PKJVQ
Windows Product Key Hash: sgMpz9msfkkcRsyp5CLuCh8a1Vc=
Windows Product ID: 00371-OEM-9044202-90070
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {5673C385-BB15-4915-BE33-E2B598435A5D}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150316-1654
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5673C385-BB15-4915-BE33-E2B598435A5D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-PKJVQ</PKey><PID>00371-OEM-9044202-90070</PID><PIDType>3</PIDType><SID>S-1-5-21-163801654-3582672073-2290200179</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>WBIBX10J</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>WBIBX10J.86A.0333.2012.0129.2308</Version><SMBIOSVersion major="2" minor="6"/><Date>20120129000000.000000+000</Date></BIOS><HWID>F5833107018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007043C' to display the error text.
Error: 0x8007043C

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Not Registered - 0x8007043c
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEABAABAAEAAAAAAAAAAQABAAEAln16IZIrgJYyiELG5rNs3dboPv12Vg==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INTEL WBIBX10J
FACP INTEL WBIBX10J
HPET INTEL WBIBX10J
MCFG INTEL WBIBX10J
WDDT INTEL WBIBX10J
ASF! INTEL WBIBX10J
ASPT INTEL WBIBX10J
WDTT INTEL WBIBX10J
SSDT INTEL SSDT PM

The above report was produced while in Safe Mode - and is pretty much useless.
When attempting to validate, you should go to www.microsoft/genuine/validate using Internet Explorer - this avoids having to use the legitcheck process. (which won't work in Safe Mode anyhow - although I'm not certain that the normal method will work anyhow, as I've never tried it!)

You need to be able to boot to Normal mode before attempting to diagnose anything.
The non-genuine notification does NOT prevent access to Normal Mode Windows - if you are unable to access Normal Mode, tehn you have other problems as well.

You should first attempt a System Restore back to a point where the system was running 'normally' and see if that helps.
Then start diagnosis if necessary.

There's no problem in the MGADiag report - although it does appear that the install has never been validated.
Attempt validation at www.microsoft/genuine/validate using Internet Explorer - what happens?

That error code is an 'Access Denied' one
You may have better luck attempting a System Restore either from Safe Mode, or from the 'Repair my Computer' option in the Advanced Boot Menu.

The fact that you were offered MSE means that validation passed!
You do NOT want to install it unless you first uninstall AVG - it's never a good idea to have two active AV apps installed, and an even worse idea to have both active!

You shouldn't need to.
Try it again from Repair My Computer

If I hit F8 during boot, one of the options is Repair Your Computer. I am assuming that is what you mean, yes?

EDIT:
OK yes, that gives additional dates. Although I had to attach my backup HD in order for them to be found! Trying now

EDIT02:
My first attempt from backup HD took a long time (20mins?) and then failed with the exact same message as before. OK I'm going back to the 4th of Jan this year. If I go back much further I may as well re-install windows from scratch. (It's just such a monumental disruption that maybe i should buy an upgrade to Window 8.1 in fact.... [groan])

EDIT03
OMG, okay this time it took well over an hour to run system restore by I still get "An unspecified error during system restore (0x8007700b7)

Now what?