Zoomin on this horse shit:
I just saw this WatAdminSvc.exe pop-up in task manager !
A quickle google sheds some light on this:
https://www.bleepingcomputer.com/startups/WatAdminSvc.exe-26949.html
"
WATADMINSVC.EXE Information
This is a valid program that is required to run at startup.
This program is required to run on startup in order to benefit from its functionality or so that the program will work. The following information is a brief description of what is known about this file. If you require further assistance for this file, feel free to ask about in the forums.
Name
Windows Activation Technologies Service
Filename
WatAdminSvc.exe
Command
C:\Windows\System32\Wat\WatAdminSvc.exe
Description
Microsoft service that periodically determines if your Windows Product ID is valid, and if not, displays warnings that your copy of Windows may not be Genuine.
File Location
%System%\Wat\WatAdminSvc.exe
Startup Type
This startup entry is installed as a Windows service.
Service Name
WatAdminSvc
Display Name
Windows Activation Technologies Service
HijackThis Category
O23 Entry
Note
%System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.
"
Bye for now,
Skybuck.