Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows Activation Technologies Pop-up

07 Oct 2015   #1
tjg79

Windows 7 Professional x64 SP1
 
 
Windows Activation Technologies Pop-up - VIRUS

I just started getting the pop-up depicted below. I haven't made any changes to my system in months.

Quote:
User Account Control - Do you want to allow the following program to make
changes to this computer?
Is anyone getting this?

Windows Activation Technologies Pop-up-user-account-control-pop-up.jpg

I'm reluctant to click yes.

Regards




My System SpecsSystem Spec
.
07 Oct 2015   #2
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Check and see if your system has KB971033 installed.
It might be asking to install KB971033 which your Windows 7 should have.
My System SpecsSystem Spec
07 Oct 2015   #3
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

I don't get that pop up but UAC is off. (Not recommended) - I use an alternative to UAC.

If UAC was switched on I'd expect to see that pop up every 3 months (90 days)

Check scheduled tasks and you can see details. On my machine it last ran on 11th September.
Windows Activation Technologies Pop-up-wat-task-scheduler.jpg
Other logs show the same date:
Windows Activation Technologies Pop-up-wat-2.jpg
Windows Activation Technologies Pop-up-wat-3.jpg


My System SpecsSystem Spec
.

07 Oct 2015   #4
tjg79

Windows 7 Professional x64 SP1
 
 

I think I was hit with a virus. I ultimately clicked yes, because it kept popping up and then the fun started. Now I'm trying to clean my system.

Windows Activation Technologies Pop-up-eset-alert.jpg

I clicked "Delete," but now I get the small pop-up every time I reboot.

Does anyone know a solution to clean this up?

Does anyone recognized that file and path? I did a Google, but nothing came up.

I'm considering going into the registry and deleting all references to it.


My System SpecsSystem Spec
07 Oct 2015   #5
tjg79

Windows 7 Professional x64 SP1
 
 

SuperAntiSpyware detected a Trojan.

Windows Activation Technologies Pop-up-superantispyware-detect.jpg


My System SpecsSystem Spec
07 Oct 2015   #6
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

I don't believe that the two are related. Your first screenshot shows UAC asking to allow:

"C:\Windows\System32\Wat\WatAdminSvc.exe"

That is a legitimate process.

ESET has detected something else.

I'm not a malware removal expert exactly but if you like you can download and run UVK then scan and create a log.

Also you could navigate to C:\Users\TJG\AppData\Roaming\Gayux\Devod.dll and check the file information.

If you decide to download UVK - install it and from the welcome screen choose "Scan and create log" then upload the result.
My System SpecsSystem Spec
07 Oct 2015   #7
tjg79

Windows 7 Professional x64 SP1
 
 

I suspect the two are related. I just deleted that directory in the users folder. Now I'm going to a complete disk clean-up and reboot to see what happens.
My System SpecsSystem Spec
07 Oct 2015   #8
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

You never did answer the question I asked in post #2

Quote:
Check and see if your system has KB971033 installed.
My System SpecsSystem Spec
07 Oct 2015   #9
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Okay so upload "C:\Windows\System32\Wat\WatAdminSvc.exe" to virus total and see if it is the leigitimate file from microsoft or an imposter.
Windows Activation Technologies Pop-up-wat-4.jpg
Windows Activation Technologies Pop-up-wat-5.jpg


My System SpecsSystem Spec
07 Oct 2015   #10
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

UVK log will show any unsigned running processes. Problem files can be removed with a script. Alternatively try this tutorial:

Process Explorer + VirusTotal (to check all processes with 50+ AV's)
My System SpecsSystem Spec
Reply

 Windows Activation Technologies Pop-up




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Receiving error 0x8004fe2 from Windows Activation Technologies
Recently started receiving message states not running genuine Windows 7, but this computer was purchased with the program installed. Usually only occurs when booting up Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code:...
Windows Updates & Activation
Windows Activation Technologies, computer not running Genuine Windows.
Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE21 Cached Online Validation Code: 0x0 Windows Product Key: *****-*****-D3FF6-DBX4C-PMRVR Windows Product Key Hash: VueNuSXJuhxhHbk14QaOuTKTCxc= Windows Product ID:...
Windows Updates & Activation
Windows Activation Technologies Plugin for Mozilla
I have this plugin for Firefox (Ver: 7.1.7600.16395) enabled, but can't seem to find any information about what it does, or required, or even if it is genuine. I searched Microsoft for the answer to no avail. Can anyone shed a light on this?
Browsers & Mail
Windows Activation Technologies Update for Windows 7.
Source - Windows Activation Technologies Update for Windows 7 - Genuine Windows Blog - The Windows Blog
Windows Updates & Activation
Installed new Activation Technologies . . .
So the update was offered unticked, but I went ahead and installed it, over 4000 registry changes later, everything works . . . . After the reboot, Norton 360 needed another reboot to update itself. So 2 reboots later Windows cheerfully comes up with my copy of Windows isn't valid. Clicked get...
Windows Updates & Activation
Windows Activation Technologies Update for Windows 7
More...
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:02.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App