Windows Activation Technologies Pop-up

Page 1 of 6 123 ... LastLast

  1. Posts : 512
    Windows 7 Professional x64 SP1
       #1

    Windows Activation Technologies Pop-up - VIRUS


    I just started getting the pop-up depicted below. I haven't made any changes to my system in months.

    User Account Control - Do you want to allow the following program to make
    changes to this computer?
    Is anyone getting this?

    Windows Activation Technologies Pop-up-user-account-control-pop-up.jpg

    I'm reluctant to click yes.

    Regards
    Last edited by tjg79; 07 Oct 2015 at 19:57.
      My Computer


  2. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #2

    Check and see if your system has KB971033 installed.
    It might be asking to install KB971033 which your Windows 7 should have.
      My Computer


  3. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #3

    I don't get that pop up but UAC is off. (Not recommended) - I use an alternative to UAC.

    If UAC was switched on I'd expect to see that pop up every 3 months (90 days)

    Check scheduled tasks and you can see details. On my machine it last ran on 11th September.

    Windows Activation Technologies Pop-up-wat-task-scheduler.jpg

    Other logs show the same date:

    Windows Activation Technologies Pop-up-wat-2.jpg

    Windows Activation Technologies Pop-up-wat-3.jpg
      My Computer


  4. Posts : 512
    Windows 7 Professional x64 SP1
    Thread Starter
       #4

    I think I was hit with a virus. I ultimately clicked yes, because it kept popping up and then the fun started. Now I'm trying to clean my system.

    Windows Activation Technologies Pop-up-eset-alert.jpg

    I clicked "Delete," but now I get the small pop-up every time I reboot.

    Does anyone know a solution to clean this up?

    Does anyone recognized that file and path? I did a Google, but nothing came up.

    I'm considering going into the registry and deleting all references to it.
      My Computer


  5. Posts : 512
    Windows 7 Professional x64 SP1
    Thread Starter
       #5

    SuperAntiSpyware detected a Trojan.

    Windows Activation Technologies Pop-up-superantispyware-detect.jpg
      My Computer


  6. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #6

    I don't believe that the two are related. Your first screenshot shows UAC asking to allow:

    "C:\Windows\System32\Wat\WatAdminSvc.exe"

    That is a legitimate process.

    ESET has detected something else.

    I'm not a malware removal expert exactly but if you like you can download and run UVK then scan and create a log.

    Also you could navigate to C:\Users\TJG\AppData\Roaming\Gayux\Devod.dll and check the file information.

    If you decide to download UVK - install it and from the welcome screen choose "Scan and create log" then upload the result.
      My Computer


  7. Posts : 512
    Windows 7 Professional x64 SP1
    Thread Starter
       #7

    I suspect the two are related. I just deleted that directory in the users folder. Now I'm going to a complete disk clean-up and reboot to see what happens.
      My Computer


  8. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #8

    You never did answer the question I asked in post #2

    Check and see if your system has KB971033 installed.
      My Computer


  9. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #9

    Okay so upload "C:\Windows\System32\Wat\WatAdminSvc.exe" to virus total and see if it is the leigitimate file from microsoft or an imposter.

    Windows Activation Technologies Pop-up-wat-4.jpg

    Windows Activation Technologies Pop-up-wat-5.jpg
      My Computer


  10. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #10

    UVK log will show any unsigned running processes. Problem files can be removed with a script. Alternatively try this tutorial:

    Process Explorer + VirusTotal (to check all processes with 50+ AV's)
      My Computer


 
Page 1 of 6 123 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 08:47.
Find Us