Hi, I get a black screen pop up for 1 second right before the shutdown process completes. On this screen I see the version of Win7 displayed and below that is a message about my Windows 7 being an illegal copy. Translation to English: "You appear to be the victim of software counterfeiting." WGA on the other hand says that there are no problems, and the windows activator tool I am often required to download always generates good keys so I am able to access everything protected by WGA. My laptop is from Dell (via respected and #1 popular reseller in my country) and I paid about 1300$ for it. That price should definitely include the win7 it came with. There is also a Win7 sticker on the machine. (Which looks quite plain in comparison to my Win XP sticker though.) And I have an OEM install disc. (Used it once already, worked fine.) So I ask: What is this? Could it be caused by me disabling the WatAdminSvc service? (In which case I am willing to live with the above described bug because services may only run on my machine when I need them. And "Windows Activation Technologies Service" is definitely something I do not need running all the time.) Thanks, Daniel "3ICE" Berezvai http://3ice.hu/

Probably just a race condition..... To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 ) Once saved, run the tool. Click on the Continue button, which will produce the report. To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response. - IN YOUR OWN THREAD, pleaseNoel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Actually, reading further..... The WATAdminService is part of the WAT Update KB971033. If you don't want the service to run, then you should uninstall the update - this means that your system will not call the service, and therefore not show a non-genuine message. The only problem will come if you have to validate the installation, since this will automatically reinstall the update.Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Hi, I get a black screen pop up for 1 second right before the shutdown process completes. On this screen I see the version of Win7 displayed and below that is a message about my Windows 7 being an illegal copy. Translation to English: "You appear to be the victim of software counterfeiting." WGA on the other hand says that there are no problems, and the windows activator tool I am often required to download always generates good keys so I am able to access everything protected by WGA. My laptop is from Dell (via respected and #1 popular reseller in my country) and I paid about 1300$ for it. That price should definitely include the win7 it came with. There is also a Win7 sticker on the machine. (Which looks quite plain in comparison to my Win XP sticker though.) And I have an OEM install disc. (Used it once already, worked fine.) So I ask: What is this? Could it be caused by me disabling the WatAdminSvc service? (In which case I am willing to live with the above described bug because services may only run on my machine when I need them. And "Windows Activation Technologies Service" is definitely something I do not need running all the time.) Thanks, Daniel "3ICE" Berezvai http://3ice.hu/ This reads to me as though you are using a pirated version of Windows 7, and the message you are receiving is as a direct consequence of this. By generates good keys, are you meaning Product Keys?

Your link is unclickable (takes me right back to this page) but copy/pasting solved that. Here is the report: Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE21 Cached Online Validation Code: 0x0 Windows Product Key: *****-*****-M3DJT-4J3WC-733WD Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A= Windows Product ID: 00371-OEM-8992671-00524 Windows Product ID Type: 2 Windows License Type: OEM SLP Windows OS version: 6.1.7601.2.00010100.1.0.048 ID: {701D688E-AEF9-4B99-BA09-C2927E7B3E8A}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Professional Architecture: 0x00000009 Build lab: 7601.win7sp1_gdr.110622-1506 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Users\ice\AppData\Local\Google\Chrome\Application\chrome.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{701D688E-AEF9-4B99-BA09-C2927E7B3E8A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-3490028867-1415014539-3403734757</SID><SYSTEM><Manufacturer>Dell Inc. </Manufacturer><Model>Dell System Vostro 3750</Model></SYSTEM><BIOS><Manufacturer>Dell Inc. </Manufacturer><Version>A05</Version><SMBIOSVersion major="2" minor="6"/><Date>20110519000000.000000+000</Date></BIOS><HWID>DBA63E07018400FE</HWID><UserLCID>040E</UserLCID><SystemLCID>040E</SystemLCID><TimeZone>Közép-európai téli id (GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>QA09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> Szoftverlicencelési szolgáltatás verziója: 6.1.7601.17514 Name: Windows(R) 7, Professional edition Description: Windows Operating System - Windows(R) 7, OEM_SLP channel Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764 Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f Extended PID: 00371-00178-926-700524-02-1038-7601.0000-1872011 Install ID: 008701848933027191142602093675462420790234151246908426 Processor certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338 PC certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339 Used license URL: http://go.microsoft.com/fwlink/?LinkID=88341 Product key certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340 Partial product key: 733WD License status: Licencelt Resets remaining: 2 "Trustable time" (?): 2011.09.09. 18:21:44 Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x0001000000000000 Event Time Stamp: 8:21:2011 17:35 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered Service: sppsvc HWID Data--> HWID Hash Current: MgAAAAIAAQABAAIAAAABAAAAAwABAAEA6GGiI3cWZkfY2PZ4YErSu7CDHGtIjPCmLnM= OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes Windows marker version: 0x20001 OEMID and OEMTableID Consistent: yes BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC DELL QA09 FACP DELL QA09 HPET DELL QA09 BOOT MCFG DELL QA09 SLIC DELL QA09 SSDT DELL PtidDevc ASF! DELL QA09 SSDT DELL PtidDevc SSDT DELL PtidDevc SSDT DELL PtidDevc UEFI DELL QA09 UEFI DELL QA09 UEFI DELL QA09 I tried my best at translating it into English. (I have no idea what trustable time means.) Furthermore, I see a lot of N/A there. Thought that might be from the service being disabled. http://3ice.hu/

I'll uninstall KB971033. (Though if nod32 will start to nag me about a missing windows update I'll have to reinstall it and just disable the service. But at least we'll know what causes the black screen for 1 second at every shutdown and I can stop worrying about it.) Thank you.http://3ice.hu/

"3ICE" wrote in message news:913aa9cb-e0b0-4909-8586-75babfa2e213... Your link is unclickable (takes me right back to this page) but copy/pasting solved that. Here is the report: Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE21 Cached Online Validation Code: 0x0 Windows Product Key: *****-*****-M3DJT-4J3WC-733WD Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A= Windows Product ID: 00371-OEM-8992671-00524 Windows Product ID Type: 2 Windows License Type: OEM SLP Windows OS version: 6.1.7601.2.00010100.1.0.048 Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x0001000000000000 Event Time Stamp: 8:21:2011 17:35 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered Service: sppsvc http://3ice.hu/ Trusted Time is the time at which the MGADiag report was run :) The problem is the Tamper with the SPPSVC I suspect that this means that youve changed the Start parameters for it. Go into Services.msc and check the Start setting it should be Automatic (delayed Start). SPPSVC MUST be allowed to run or you will get non-genuine notifications. Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

This is not a keygen, but a windows validation tool signed by Microsoft that is available from http://go.microsoft.com/fwlink/?LinkId=71696. The keys it generates look like this: CFEB4G76 and the file is called GenuineCheck.exe This is taken directly from the FAQ: You can complete the validation process using non-Microsoft web browsers, but you'll validate using the alternate method by running a small executable file. Who would have the balls to ask for help with a keygen here? http://3ice.hu/

Thank you. I should have checked my clock :) Yes indeed the sppsvc service has been tampered with: I disabled it (along with most other services). I only enable it when I need to validate a licensed product. I have not yet gone through with uninstalling KB971033 as you suggested. Should I still do it?http://3ice.hu/

"3ICE" wrote in message news:70a13fef-24f1-4e7a-918c-04ef2ee93518... Thank you. I should have checked my clock :) Yes indeed the sppsvc service has been tampered with: I disabled it (along with most other services). I only enable it when I need to validate a licensed product. I have not yet gone through with uninstalling KB971033 as you suggested. Should I still do it? http://3ice.hu/ Windows does its own validation once the WAT Update is installed which is why you need to remove it, if you dont want it checking for updates. The SPPSVC MUST run it doesnt phone home at all. Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

"3ICE" wrote in message news:183dbadc-b446-4d1e-bcb5-276d6c853af1... Who would have the balls to ask for help with a keygen here? http://3ice.hu/ Youd be surprised! :) Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

I am not experiencing any negative effects after disabling sppsvc. So why must I allow it to run? I will try rebooting with and without sppsvc running for completeness' sake, but unless there is a good reason for running sppsvc I would rather not let it. (And endure the 1 second long black screen instead.) I uninstalled KB971033 and set it to hidden. (Service disappeared instantly. Overall uninstall experience: very good!) I will now reboot my computer and then post the results. http://3ice.hu/

I'm still saying that this is a non-genuine version. Here's what I get if I Google for the product key mentioned above: http://lmgtfy.com/?q=M3DJT-4J3WC-733WD

The product key reported by MGADiag is different from what I see on the sticker attached to my laptop. (And Win7 reports a third key, with a different format and "OEM" in it. Not sure why that is...) All I know is that my laptop passed online validation and is activated. Why would you use lmgtfy in this scenario? A simple link to the google search would have been faster. Also, wrong thread.http://3ice.hu/

I'm still saying that this is a non-genuine version. Here's what I get if I Google for the product key mentioned above: http://lmgtfy.com/?q=M3DJT-4J3WC-733WD That's p[erfectly normal for an OEM_SLP Key - they are ALL well-published, but depend on teh SLIC table in the BIOS, together with the certificates in the manufacturer's installation disks to be able to self-activate the Key - the key itself is blocked from activation by MS's servers.Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

The product key reported by MGADiag is different from what I see on the sticker attached to my laptop. (And Win7 reports a third key, with a different format and "OEM" in it. Not sure why that is...) All I know is that my laptop passed online validation and is activated. Why would you use lmgtfy in this scenario? A simple link to the google search would have been faster. Also, wrong thread. http://3ice.hu/ Again - this is normal for the installation where teh OEM_SLP Key is in use - it's the one used for bulk installatiopon by the big OEM's - your Key on the COA sticker is unique to your machine, and is there for use if the self-activation breaks down dfor some reason, or you reinstall using media other than the Manufacturer's recovery disks.Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Thank you for the explanation.http://3ice.hu/