Friday, May 05, 2006

Disable Windows Genuine Advantage (WGA) Notification (KB905474)

Wow...Microsoft had some how come up with this great idea where it will affect all those people around the world who update their Windows XP updates through the Automatic Updates services.This idea is to tag those pirated copies of Windows XP around the world where a notification will popup when it detected your copy of Windows is non-genuine copy.

Anyway, I manage to find out that there is some way to disable the popup notification even with your non-genuine copy of Windows XP updated with the Windows Genuine Advantage (WGA) Notification (KB905474).Below is the steps to disable the WGA popup notification.

There are 2 parts to this spyware popup: WGAtray.exe and wgalogon.dll. Killing the WGAtray.exe process causes it to reappear in 1 second. With it present, WGAlogon cannot be deleted. And you can't delete it while it's running. Seem impossible?

First, you need to have an Explorer window open and pointing to the C:\windows\system32 folder, where the spyware resides (interestingly, doing a hard drive search for "wgatray" turns up nothing- a very clever spyware). And you have to have Task Manager open, right beside the Explorer window. This is tricky, and must be done fast - you end task the process in Task Manager, and before the spyware can reopen itself, you must delete WGAtray.exe in the Explorer window by pressing the delete button and the "Shift" button simultaneously. You only have a split second, but it is possible. Once the spyware .exe is gone, you must reboot your computer.

Yes, now you will see the spyware's nag screen. No problem, it's the last time and you will never see it again when you reboot it again. When you do finally get to the desktop, do a search "for WGAlogon.dll" You will find 2 copies, one in system32 folder and another one in the dllcache folder. Without the WGAtray spyware to protect them (did you notice it was gone? Yahoo!!!!!), you can rename and then permanently delete both of these spyware .dll's. Your system may hang when you reboot it the first time, but when it is brought back up to normal status, THE SPYWARE IS ALL GONE.

Hahaa...there you go...your Windows XP will be free from the popup notification :)

4 Comments:

Blogger Unknown said...

Nice post. worked for me. Nice picture of yours too.

11:08 AM  
Blogger resresres said...

Yeah this good and all, but is only a temporary solution. In the next windows update, it just comes back!!

2:46 PM  
Blogger ericn_3 said...

Hi Jia,
Great advice and hopefully it has rid of the nagging WGA notice. Lovely picture of a lovely girl too! Thank you very much.
Eric

5:48 PM  
Blogger haideryaple said...

The 10 most valuable pieces of the world - Titanium-Art
The 10 womens titanium wedding bands most valuable pieces of the world - Titanium-Art · 1. The most titanium white dominus important gold piece in any category · 2. The most valuable titanium 4000 part of the implant grade titanium earrings world · titan metal 3.

5:19 PM  

Post a Comment

<< Home