locked
Windows 7 WAT popup daily RRS feed

  • Question

  • I've been working in this laptop for nearly two years. Suddenly it came last week with the WAT popup telling me windows is not genuine, though system properties tell me otherwise.

    Please advise. Below the log message:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-9VPR7
    Windows Product Key Hash: BCpRjWRu9dGc6D6ndtK2yAQtBqg=
    Windows Product ID: 55041-011-1379924-86447
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00010100.1.0.004
    ID: {C4DD4D69-9885-452B-B762-681F58677476}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Enterprise
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_ldr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C4DD4D69-9885-452B-B762-681F58677476}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-011-1379924-86447</PID><PIDType>6</PIDType><SID>S-1-5-21-651146493-411251309-2390803111</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP EliteBook 8740w</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68CAD Ver. F.21</Version><SMBIOSVersion major="2" minor="6"/><Date>20111205000000.000000+000</Date></BIOS><HWID>E7AD3707018400FE</HWID><UserLCID>0413</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>West-Europa (standaardtijd)(GMT+01:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Versie van Software Licensing-service: 6.1.7601.17514

    Naam: Windows(R) 7, Enterprise edition
    Beschrijving: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activerings-id: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Toepassings-id55c92734-d682-4d71-983e-d6ec3f16059f
    Uitgebreide PID: 55041-00172-011-137992-03-1033-7601.0000-1702012
    Installatie-id011693803245615182702783090511961275024045612025932014
    URL van processorcertificaat: http://go.microsoft.com/fwlink/?LinkID=88338
    URL van computercertificaat: http://go.microsoft.com/fwlink/?LinkID=88339
    URL van gebruikte licentie: http://go.microsoft.com/fwlink/?LinkID=88341
    URL van productcodecertificaat: http://go.microsoft.com/fwlink/?LinkID=88340
    Gedeeltelijke productcode: 9VPR7
    Licentiestatus: licentie
    Resterend aantal nieuwe Windows-activeringen: 2
    Vertrouwde tijd: 8-1-2014 18:27:13

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:3:2014 12:17
    ActiveX: Not Registered - 0x8007007e
    Admin Service: Not Registered - 0x80029c4a
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: QgAAAAEABAABAAIAAAACAAAACAABAAEAHKKmGoI/AJT2FnSrkOESms5wXLdiPRj0UMWkIabxnPGcWKAecoq+QXZW

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            HPQOEM        1520    
      FACP            HPQOEM        1520    
      HPET            HPQOEM        1520    
      MCFG            HPQOEM        1520    
      TCPA            HPQOEM        1520    
      SSDT            HPQOEM        SataAhci
      SSDT            HPQOEM        SataAhci
      SLIC            HPQOEM        SLIC-MPC
      SSDT            HPQOEM        SataAhci
      DMAR            INTEL         CP_FIELD
      SSDT            HPQOEM        SataAhci
      SSDT            HPQOEM        SataAhci
      SSDT            HPQOEM        SataAhci
      ASF!            HPQOEM        1520    

    Wednesday, January 8, 2014 6:02 PM

Answers

  • The problem appears to be here...

    ActiveX: Not Registered - 0x8007007e
    Admin Service: Not Registered - 0x80029c4a

    0x8007007e - "Specified module could not be found"
    0x80029c4a - "TYPE_E_CANTLOADLIBRARY"

    This implies to me that the problem is with your internet connection - possibly a transparent proxy server on your intranet? Try uninstalling KB971033 (the WAT update) - that should stop the notifications.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 10, 2014 7:55 AM
    Moderator

All replies

  • You have a Volume License Windows 7 Enterprise edition installed.  Please contact the IT Administrator for assistance.

    Carey Frisch

    Wednesday, January 8, 2014 6:11 PM
    Moderator
  • I know, but they didn't know anything about it. They only could reinstall... I want to be able to tell them what to do.
    Wednesday, January 8, 2014 7:41 PM
  • Wednesday, January 8, 2014 8:09 PM
    Moderator
  • I've been working in this laptop for nearly two years. Suddenly it came last week with the WAT popup telling me windows is not genuine, though system properties tell me otherwise.

    Please advise. Below the log message:

    (Report Snipped)    

    Unless I am mistaken, there does not appear to be anything wrong with this report.  Are you getting the Non-Genuine popup every time you boot the PC?

    Please do not read this sentence. Please ignore the previous sentence.

    Wednesday, January 8, 2014 8:17 PM
  • Unless I am mistaken, there does not appear to be anything wrong with this report.  Are you getting the Non-Genuine popup every time you boot the PC?

    Popup does not pop on every boot. It's more once or twice a day, independant of boot sequence.

    Malware was expected, but scan was negative. Virusscan was negative too.

    Thursday, January 9, 2014 7:04 AM
  • The problem appears to be here...

    ActiveX: Not Registered - 0x8007007e
    Admin Service: Not Registered - 0x80029c4a

    0x8007007e - "Specified module could not be found"
    0x80029c4a - "TYPE_E_CANTLOADLIBRARY"

    This implies to me that the problem is with your internet connection - possibly a transparent proxy server on your intranet? Try uninstalling KB971033 (the WAT update) - that should stop the notifications.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 10, 2014 7:55 AM
    Moderator
  • Try uninstalling KB971033 (the WAT update) - that should stop the notifications.

    Notifications did indeed stop.

    But i fear that its only because of the missing WAT update? What is it is reinstalled with the next update cycle?

    Tuesday, January 14, 2014 5:17 PM
  • Try uninstalling KB971033 (the WAT update) - that should stop the notifications.

    Notifications did indeed stop.

    But i fear that its only because of the missing WAT update? What is it is reinstalled with the next update cycle?

    KB971033 is not installed by default - and will not normally be installed by Windows Update unless manually forced.

    You can ensure it doesn't happen by opening Windows Update, then hiding the KB971033 entry - right-click on it and select 'Hide update'

    The WAT update may simply be complaining because it's not able to properly contact the activation servers to update its definitions - uninstalling it stops the requests, and the error isn't flagged or even known.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, January 14, 2014 9:55 PM
    Moderator