New
#1
Windows Activation Technologies Pop-up - VIRUS
Last edited by tjg79; 07 Oct 2015 at 19:57.
Check and see if your system has KB971033 installed.
It might be asking to install KB971033 which your Windows 7 should have.
I think I was hit with a virus. I ultimately clicked yes, because it kept popping up and then the fun started. Now I'm trying to clean my system.
I clicked "Delete," but now I get the small pop-up every time I reboot.
Does anyone know a solution to clean this up?
Does anyone recognized that file and path? I did a Google, but nothing came up.
I'm considering going into the registry and deleting all references to it.
I don't believe that the two are related. Your first screenshot shows UAC asking to allow:
"C:\Windows\System32\Wat\WatAdminSvc.exe"
That is a legitimate process.
ESET has detected something else.
I'm not a malware removal expert exactly but if you like you can download and run UVK then scan and create a log.
Also you could navigate to C:\Users\TJG\AppData\Roaming\Gayux\Devod.dll and check the file information.
If you decide to download UVK - install it and from the welcome screen choose "Scan and create log" then upload the result.
I suspect the two are related. I just deleted that directory in the users folder. Now I'm going to a complete disk clean-up and reboot to see what happens.
You never did answer the question I asked in post #2
Check and see if your system has KB971033 installed.
UVK log will show any unsigned running processes. Problem files can be removed with a script. Alternatively try this tutorial:
Process Explorer + VirusTotal (to check all processes with 50+ AV's)