Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Window 7 genuine WAT message pops up everyday RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    For the past 2 weeks, I've been getting a WAT message popping up every day around 7pm stating not genuine and that I need to activate it. I have re-entered the correct license key under Windows / Properties as well as running mui.exe 4, called Microsoft, and manually activated. Both times were successful yet I still get the WAT popup every day around 7pm.

    Here is the MGADiag information I just ran. Please analyze and let me know what my next steps should be. Thank you.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-RM3GQ
    Windows Product Key Hash: 9A1vDXhWtQtWMdw6ma4nVjEJwcA=
    Windows Product ID: 55041-011-2023597-86239
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00010100.1.0.004
    ID: {A9DD2D1A-0BB8-473B-96C1-BF326345A835}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Enterprise
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.130708-1532
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{A9DD2D1A-0BB8-473B-96C1-BF326345A835}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-011-2023597-86239</PID><PIDType>6</PIDType><SID>S-1-5-21-36787291-2862434332-4262826802</SID><SYSTEM><Manufacturer>Dell Inc</Manufacturer><Model>XPS 630i</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>1.0.13</Version><SMBIOSVersion major="2" minor="5"/><Date>20090505000000.000000+000</Date></BIOS><HWID>FD023207018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>MC09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Enterprise edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 55041-00172-011-202359-03-1033-7601.0000-3522013
    Installation ID: 019726640376799193522395807435220550173544189684978955
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: RM3GQ
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 1/8/2014 9:06:56 AM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x8004FC12
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:8:2014 07:11
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEAAgABAAEAAwACAAAAAQABAAEAeqhq4w4XSCQqaxzSAuXaroB9TOqaiEJvmF9MWA==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC DELL   MC09   
      FACP DELL   MC09   
      HPET DELL   MC09   
      BOOT DELL   MC09   
      MCFG DELL   MC09   
      SLIC DELL   MC09   
      SSDT PmRef CpuPm

    Wednesday, January 8, 2014 5:32 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    The 0x8004FC12 error is VERY unusual!

    Are you running behind a company firewall all the time? - or do you only get the notifications when you are behind the firewall?

    If so, then try uninstalling the WAT Update KB971033, and see if that cures the problem.

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 10, 2014 11:58 PM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    The 0x8004FC12 error is VERY unusual!

    Are you running behind a company firewall all the time? - or do you only get the notifications when you are behind the firewall?

    If so, then try uninstalling the WAT Update KB971033, and see if that cures the problem.

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 10, 2014 11:58 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks Noel, I have unistalled KB971033. We'll see how it goes tonight.

    A little history on this PC. It was imaged with our licensed copy of WIN7 Enterprise but is off domain and is a stand-alone unit at a reception/guard desk in our building. It does not have Internet access at all due to OpenDNS settings we have in place. We have a licensed copy of AVG 2012 Enterprise installed and Windows Firewall is disabled.

    Tuesday, January 14, 2014 11:54 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Offline PC's should not have the WAT update installed, as it will complain if it's unable to contact the MS servers at least every 90 days.

    Uninstalling it should solve your problem.

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, January 15, 2014 8:11 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thanks again Noel. Looks like uninstalling the WAT update resolved the issue. The WAT message no longer pops up. 
    Wednesday, January 15, 2014 3:15 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Great - thanks for the feedback.

    Good luck

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, January 15, 2014 3:50 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    I have the same problem.  I've been receiving the WAT Genuine messages for a while and just ignoring them, thinking it's some kind of malware since it wants to "click here" to resolve online.  Today I get a call from a company called TechZieta claiming to respond to Microsoft warnings and wanting to take over control and fix my machine for $80 a year, etc.  I'm thinking it's a scam, but not sure.  How can you tell if Microsoft warnings are real and if contractors actually are retained by Microsoft?  I am looking for the KB971033 update to remove same and have not yet found it.

    Thanks,

    Mike

    Monday, March 2, 2015 8:57 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    OK - I found it and am uninstalling it.

    Monday, March 2, 2015 9:00 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    That is NOT the proper way to fix things -

    1) the telephone call was a scam - definitely! - MS does not cold-call, and does not collect user-identifiable information using the WAT update.

    2) uninstalling the WAT update merely hides the problem that causes the notification, it doesn't cure it.

    3) you need to start a NEW thread of your own, and post an MGADiag report - with the WAT update installed - to have a chance of fixing the system properly.

    (Locking thread to avoid confusion)

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    Tuesday, March 3, 2015 9:47 AM
    Moderator