OK I don't know whether this is useful or not, but I made a list of all files that changed after wat maked me non-genuine. If it's not usefull then I had at least something to spend my time I tried to limit the external influences on the vm I used. It was a bit hard to copy all the files, that's why I used a wim image. I installed win7 dutch x86 ultimate in vmware + al updates from winupdate except for the optional ones + vmware tools. Then I rebooted, went to microsoft/genuine and installed wat but didn't run validation test, I also installed a loader with the lenovo key to make shure wat bloks me. In IE8 I went to about:blank and deleted all coockies, history etc, now I rebooted again to make shure wat installed correctly and windows is activated by the loader. Now I shut it down, made a snapshot, added a 2nd hdd to the vm, booted with acronis cd and made a diskclone from the windows disk to the added one. Now I booted back into windows and used imagex to make a wimimage of the clonedisk. (I had to use this acronis and imagex stuff cause vmware didn't let me map the hdd for snapshot reasons ) Reverted back to snapshot and booted, went to the validation site and let wat make me non-genuine, again went to about:blank and removed all coockies. Now I shut down and again I used acronis and imagex to make a non genuine wim. I mounted the wims to a folder (wim from genuine to C:\Genuine and wim from non genuine to C:\Non-genuine) Due to imagex this things were not included in the image: \$windows.~bt \$windows.~ls \winpepge.sys \Windows\CSC \Recycled \Recycler \$Recycle.Bin\* \System Volume Information \pagefile.sys \hiberfil.sys I compared the genuine and non-genuine directories with windiff to find any files that were changed or added after wat did his job, below is the result: Code: -- c:\Genuine : c:\Non-genuine -- includes left-only,right-only,differing files .\programdata\microsoft\crypto\keys\61482dedddcee50c801caef7f8d0b8f5_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\crypto\rsa\machinekeys\1bf71d445a22051f6054d68488ead2c3_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\crypto\rsa\machinekeys\45b70d19b7dcfc6faad5bacb4fd5ec47_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\crypto\rsa\machinekeys\4c44fa663462377d01e95d8d932fed27_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\crypto\rsa\machinekeys\671d8340e085b3ed83843b94c93d4d08_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\crypto\rsa\machinekeys\890141a15b68c6ecc5d2cde1faae3aeb_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\crypto\rsa\machinekeys\8d456bbcc6d086a7d620d9a87c2a4d57_c83e5f60-7f38-4994-9bbe-fd4970c56efconly in c:\Non-genuine .\programdata\microsoft\crypto\rsa\machinekeys\9ec5c1d24b26e26506afe743127bdc81_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\crypto\rsa\machinekeys\c114c7e3e4112959ded671952a3a9be7_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\crypto\rsa\machinekeys\c74a4b655d2bde4767c510cd3e39de2d_c83e5f60-7f38-4994-9bbe-fd4970c56efcBoth files unreadable(both have identical times) .\programdata\microsoft\rac\publisheddata\racwmidatabase.sdfdifferent (c:\Non-genuine is more recent) .\programdata\microsoft\rac\statedata\racdatabase.sdfdifferent (c:\Non-genuine is more recent) .\programdata\microsoft\rac\statedata\racmetadata.datdifferent (c:\Non-genuine is more recent) .\programdata\microsoft\rac\statedata\racwmidatabookmarks.datdifferent (c:\Non-genuine is more recent) .\programdata\microsoft\rac\statedata\racwmieventdata.datdifferent (c:\Non-genuine is more recent) .\programdata\microsoft\user account pictures\stan.datBoth files unreadable(both have identical times) .\programdata\microsoft\windows\drm\drmstore.hdsdifferent (c:\Non-genuine is more recent) .\users\all users\microsoft\crypto\keys\f2ad18bb3aeea758e69313670c91684b_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\0260baecbc82c236c276f4a1964528dc_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\04a91fe02c7e2e9fbf83bb6addfa5947_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\097b7fd31ef8d6bdd7a2348d55024a51_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\105f50429c4078994b18941dc4232ea4_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\1560cd1968821f6991b6a957a38a221e_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\1bec7e549039c4390475a1eb7a33e86b_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\1c37ecf1e578c70d84d54cc3a98d4e18_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\24765e4100c33eafc35f20423495b9e3_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\29aa96552e82b69b69d52d6f1e0bfccc_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\304f2c8199ead2b6e37afda28091bfa1_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\36f40b63003b4931920094f5cc0d1851_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\375fbceda52976e85f4273aebbc7ee11_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\3b11664110115a98a18926765863fd91_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\3bb20761b6d7270a065d8b1a6a2f6e71_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\3d77ecc92462b6c9b442781661ecd1a2_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\4595f40bd2bbf4be5d3f13d52c4fe3b0_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\462cd8b78bfe0a2d837b3e5032c8558d_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\46ebaa7828e00619e42ae043c8ec851c_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\4cf799310ee607423413bfe6a853877d_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\556b9ffe8f97cac41c58e8e19b331066_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\5826228ac2a55cf899ef3b703defdf4e_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\5827cf8d9530ca78cd07d9ecd0f93e0a_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\6142960875da4600267a18f32e19966d_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\631a5ec1ee30ffbe1469fb50ec6d7b4a_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\67af80045837d5bf9b522a040fbea65c_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\69049ad55d69720dfb1cb8103e9849e7_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\6a9db62370c340aaa81a666142697e40_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\7bb5382a13eb1fd1cf856ffc133a3c92_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\80c2fd446a921c635d6adffcdcd1e9c5_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\824fc02be5a6394514312c050332e8d6_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\88dd84982df4bfd7e424acd88a943064_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\89757ecc7cd0142dd354a40d6166121a_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\8d6b93d98f06ad91ce036e94e9973be5_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\93f7bed8fd9910b311024a6665747ca3_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\9582b220b29d4fa9209751feeb74a7aa_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\9c54fca8ec508916dc48da192dab0d2c_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\9d7f033cfdbb71c861d4337af26bf146_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\9dd4a907f9082f818771c125d56847c4_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\a583625a9a9166aae830ce467bc9bf5b_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\a8dacc33bef7414a51fda65daf12bf7a_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\ad6b1d33ffb20ae2d697b8fd4f2d716a_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\ae027a5e054c701f2306de1e2c2b6c09_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\b287207871c48ee86be54ac09b40a019_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\b5c0ab3259a298ae0aa6e149ae078e47_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\ba155d257667972a4109cf0b7b086531_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\bcff63e65666c277ee51e7d7d65970ae_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\be8c8c4870c7189cdaf316af85654ea1_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\c024ad50b5263d7f8a1f3ac3fe11d55b_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\c05b45542bffb1c0545ecd74e42c9bef_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\c2225588451f9014ecdd82c73e190472_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\c3ba4fe3eb67de8321af2602a778dfe4_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\c72151113767352847b6b903bed3243e_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\d58a074ec4ae35d450c6793c97bd5779_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\da37afab74f34b782a160b43054ae252_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\da77d92e0d57dec5fd18f320b47d9496_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\dc73c11b65a4e77b88e8a952bee0e640_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\e0401ca347c82ccc6430030526a5d744_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\e0a303c6dbaa74ba7301a0de5edfc424_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\e9542f2869a78efab8c662caa1b5a940_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\ead50f0813eaae28e4b4868df9840db6_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\eeef64f7c80f8f8d263b3a2d501f9b2f_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\f194a573b3c39078c7f84a13450df324_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\fab1ec56be65391a036f83d577737759_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\fb1c7d9ecc9d5b401632a1f43cfa6bf4_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\fb238731728be3b21c1a8de60583b7a8_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\fc1e3851f429ea606d6ff1e01a5229f1_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\crypto\rsa\machinekeys\fc53e817c50c106e013488986288358e_0aab4e10-b4e1-4c51-870a-ed1ca627573dBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\authapp_header.jpgBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\button.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\checkbox.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\combobox.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\divwrapper.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\downarrow00.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\externalwrapper.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1025.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1028.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1037.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1038.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1041.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1042.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1081.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1095.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1097.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1098.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1099.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1100.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_1102.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_2052.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_3098.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\global_default.cssBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\hip_abc.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\hip_audiorepl.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\hip_speaker.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\hipuser.htmBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\ic_alert_low_16x.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\image.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\link.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\localization.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\multiusersso.htmBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\newuser.htmBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\newusercomm.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\newuserfed.htmBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\querystring.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\saveduser.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\savedusers.htmBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\text.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\textbox.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\tilebox.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\uicore.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\uiresource.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\usertile.jsBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\wait.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\waitpage.htmBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\wlid_book.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\wlid_frame.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\wlid_icon_error.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\wlid_logo_h.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\identitycrl\production\temp\wlidui_wlidsvc\wlid_usertile.gifBoth files unreadable(both have identical times) .\users\all users\microsoft\microsoft security essentials\support\application.etlBoth files unreadable(both have identical times) .\users\all users\microsoft\user account pictures\ward.datBoth files unreadable(both have identical times) .\users\all users\microsoft\windows\drm\drmstore.hdsBoth files unreadable(both have identical times) .\users\all users\vmware\vmnetdhcp.leasesBoth files unreadable(both have identical times) .\windows\bootstat.datdifferent (c:\Genuine is more recent) .\windows\setupact.logdifferent (c:\Non-genuine is more recent) .\windows\windowsupdate.logdifferent (c:\Non-genuine is more recent) .\windows\logs\cbs\cbs.logdifferent (c:\Non-genuine is more recent) .\windows\logs\dpx\setupact.logBoth files unreadable(both have identical times) .\windows\logs\dpx\setuperr.logBoth files unreadable(both have identical times) .\windows\microsoft.net\framework\v2.0.50727\ngen_service.logdifferent (c:\Non-genuine is more recent) .\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe.configBoth files unreadable(both have identical times) .\windows\panther\unattendgc\diagerr.xmlBoth files unreadable(both have identical times) .\windows\panther\unattendgc\diagwrn.xmlBoth files unreadable(both have identical times) .\windows\panther\unattendgc\setupact.logBoth files unreadable(both have identical times) .\windows\panther\unattendgc\setuperr.logBoth files unreadable(both have identical times) .\windows\pla\system\system diagnostics.xmlBoth files unreadable(both have identical times) .\windows\pla\system\system performance.xmlBoth files unreadable(both have identical times) .\windows\security\database\secedit.sdbBoth files unreadable(both have identical times) .\windows\softwaredistribution\reportingevents.logdifferent (c:\Non-genuine is more recent) .\windows\softwaredistribution\datastore\datastore.edbdifferent (c:\Non-genuine is more recent) .\windows\softwaredistribution\datastore\logs\edb.chkdifferent (c:\Non-genuine is more recent) .\windows\softwaredistribution\datastore\logs\edb.logdifferent (c:\Non-genuine is more recent) .\windows\softwaredistribution\download\install\mpas-d_bd1.exeonly in c:\Genuine .\windows\system32\7b296fb0-376b-497e-b012-9c450e1b7327-5p-0.c7483456-a289-439d-8115-601632d005a0different (c:\Non-genuine is more recent) .\windows\system32\7b296fb0-376b-497e-b012-9c450e1b7327-5p-1.c7483456-a289-439d-8115-601632d005a0different (c:\Non-genuine is more recent) .\windows\system32\catroot2\dberr.txtdifferent (c:\Non-genuine is more recent) .\windows\system32\catroot2\edb.chkdifferent (c:\Non-genuine is more recent) .\windows\system32\catroot2\edb.logdifferent (c:\Non-genuine is more recent) .\windows\system32\catroot2\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\catdbdifferent (c:\Non-genuine is more recent) .\windows\system32\catroot2\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\catdbdifferent (c:\Non-genuine is more recent) .\windows\system32\logfiles\ait\aiteventlog.etl.004different (c:\Non-genuine is more recent) .\windows\system32\logfiles\scm\9b75c702-ea13-406a-badb-6c588ee4375bdifferent (c:\Non-genuine is more recent) .\windows\system32\logfiles\scm\a1cfa52f-06f2-418d-addb-cd6456d66f43different (c:\Non-genuine is more recent) .\windows\system32\logfiles\scm\a316e645-1c56-45a6-bd6a-7dca79778090different (c:\Non-genuine is more recent) .\windows\system32\logfiles\scm\a6394592-54ce-4e93-8d64-1a068f462632different (c:\Non-genuine is more recent) .\windows\system32\logfiles\scm\bba67ad0-4ba0-4b44-827b-ff419b70c057different (c:\Non-genuine is more recent) .\windows\system32\logfiles\scm\de8bae53-2809-4f75-85ef-427d364b9b2cdifferent (c:\Non-genuine is more recent) .\windows\system32\logfiles\scm\f1369a11-e983-4458-b390-712efa1cba44different (c:\Non-genuine is more recent) .\windows\system32\logfiles\scm\f46223c1-53c4-4c7d-bde5-94402ef5f75edifferent (c:\Non-genuine is more recent) .\windows\system32\logfiles\sqm\sqmlogger.etl.004only in c:\Genuine .\windows\system32\logfiles\sqm\sqmlogger.etl.005only in c:\Genuine .\windows\system32\logfiles\sqm\sqmlogger.etl.006only in c:\Genuine .\windows\system32\logfiles\sqm\sqmlogger.etl.007only in c:\Genuine .\windows\system32\logfiles\sqm\sqmlogger.etl.008only in c:\Genuine .\windows\system32\restore\machineguid.txtBoth files unreadable(both have identical times) .\windows\system32\sysprep\panther\ie\diagerr.xmlBoth files unreadable(both have identical times) .\windows\system32\sysprep\panther\ie\diagwrn.xmlBoth files unreadable(both have identical times) .\windows\system32\sysprep\panther\ie\setupact.logBoth files unreadable(both have identical times) .\windows\system32\sysprep\panther\ie\setuperr.logBoth files unreadable(both have identical times) .\windows\system32\wbem\repository\index.btrdifferent (c:\Non-genuine is more recent) .\windows\system32\wbem\repository\mapping1.mapdifferent (c:\Non-genuine is more recent) .\windows\system32\wbem\repository\mapping2.mapdifferent (c:\Non-genuine is more recent) .\windows\system32\wbem\repository\objects.datadifferent (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\application.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\hardwareevents.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\internet explorer.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\key management service.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\media center.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-application-experience%4problem-steps-recorder.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-application-experience%4program-compatibility-assistant.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-application-experience%4program-compatibility-troubleshooter.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-application-experience%4program-inventory.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-application-experience%4program-telemetry.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-bits-client%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-branchcachesmb%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-dhcp-client%4admin.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-dhcpv6-client%4admin.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-diagnosis-dps%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-diagnosis-scheduled%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-grouppolicy%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-homegroup provider service%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-kernel-power%4thermal-operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-kernel-storemgr%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-kernel-whea%4errors.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-kernel-whea%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-known folders api service.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-mui%4admin.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-mui%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-ncsi%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-networkaccessprotection%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-networkaccessprotection%4whc.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-networkprofile%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-offlinefiles%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-printservice%4admin.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-readyboost%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-resource-exhaustion-detector%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-restartmanager%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-terminalservices-localsessionmanager%4admin.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-terminalservices-localsessionmanager%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-uac%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-user profile service%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-windows defender%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-windows defender%4whc.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-windows firewall with advanced security%4firewall.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-windowsbackup%4actioncenter.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-windowssystemassessmenttool%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\microsoft-windows-windowsupdateclient%4operational.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\microsoft-windows-winlogon%4operational.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\security.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\setup.evtxBoth files unreadable(both have identical times) .\windows\system32\winevt\logs\system.evtxBoth files unreadable (c:\Non-genuine is more recent) .\windows\system32\winevt\logs\windows powershell.evtxBoth files unreadable(both have identical times) .\windows\tasks\schedlgu.txtdifferent(both have identical times) .\windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7600.16385_none_d104e6cf97534cc4\dnary.xsdBoth files unreadable(both have identical times) -- 242 files listed If anyone is interested in some files I'll upload them, both from non-genuine and genuine.
Linux is not that great, just free. I have not found great midi software yet. No drivers for digital audio equipment.
Okay. I never modded my Bios. I'm using a Gigabyte GA-EP45-UD3P rev1.0 Bios v. F10 I just installed the Daz Loader v1.77r and installed the WAT971033. Windows 7 x86 is still activated. I installed the loader 1.77r over the loader 1.72 that I used to install Windows 7 originally. Not one problem occurred.
Has anyone found out what the hostname of the activation server? Even if you pass the initial activation. You need to stop it from getting further updates. kogi
I had problem with wat with my old installed win7, but when I do a fresh installation then my problem was solved & WAT iis working well. my be , I m not sure abt others.
Gigabyte GA-EP45-DS3R Bios mod F10, WAT installed. Passed Genuine many times Ok, my board is from July 2008, Bios August 2008.
This is the thread that doesn't end, Yes, it goes on and on, my friend. Some people started reading it, not knowing what it was, and they'll continue reading it forever just because...
As far as threads go, it isn't too bad, some good information in it however there is also allot of hysteria over something that as of yet is not a big deal. People got worked up and stressed out over nothing. Previous to this there were isolated occurences of activations failing on modded based, loader based and legit/retail based systems and those problems were fixed, now everytime someone gets a non-genuine notification they panic thinking WAT has killed their OS when it could be as simple as waking from hibernation or sleep has dumped the slic from memory and could be fixed by a reboot. You then see people asking for help because they installed 3 different loaders and remove wat trying to fix something that a reboot could have cured. Just saying.
In reply to Lemar on 02-18-2010: (01:04) Hazar's option to deactivate WAT doesn't work out properly. Go to Microsoft online, and validate you copy of Windows: you then will see all files are freshly installed (even if you installed the leaked updates already).
Isn't today WAT Tuesday, when it is sent out to all PC's through automatic updates? If so, there should be an uptick in activity.
Maybe off-topic, and I don't want to derail the thread, but... ..any speculation as to why MS never broke the Vista loader? I mean, I used it since the beginning and updated indiscriminately without issue.