Disable and Remove Windows Genuine Advantage Notifications Nag Screen
This page has been updated, visit the new article on how to bypass and disable the WGA or way to make your Windows genuine permanently.
Microsoft has released WGA Notifications application which effectively turned Microsoft Windows operating system into a ‘nagware’, with a “This copy of Windows is not genuine” warning. What the Windows Genuine Advantage Notifications application does what it will check your Microsoft Windows XP validity. If it found that the copy of Windows XP is not validated, not genuine, counterfeit, unlicensed, pirated, illegal, unauthorised or simply failed the Windows Genuine Advantage validation process, then the notification messages will appear at various places and time.
Disclaimer: This article is for informational and educational purpose only, as most information is found on various part of Internet. Readers should contacts Microsoft if their licensed or OEM software cannot be validated or purchase genuine software.
When you log on to a non-genuine copy of Windows XP, the following notification error message “This copy of Windows is not genuine” will pop-up on the logon process:
And the nicely said “You may be a victim of software counterfeiting” message on the bottom right corner of log-in screen:
Microsoft allows Windows faithfuls to have 2 options: Get Genuine or Resolve Later. Click on Resolve Later will temporarily bypass the notification and let you login into and use Windows nagged with notification icon and messages, which will randomly appear as balloon notification message with an icon in the notification area (system tray).
Clicking on the balloon notification or the notification area icon will lead you to the Windows Genuine Advantage Validation Failure Web page that contains the specifics of the validation failure and the steps that you can take to make the operating system genuine.
To get rid of the WGA notifications that intends to remind you that your Windows is not validated, you can buy a validly licensed copy of genuine Microsoft Windows.
Update: Bypass WGA Validation with Crack or Hack and Disable WGA Notifications Warning Message Workarounds
Latest Version: 1.5.554.0 on October 2006 (distribute to some computers with no known roll-out pattern), 1.5.708.0 on September 2006 (distribute to whoever wants to download from Microsoft Download Center), 1.5.540.0 on 28th June 2006, 1.5.532.2 on 6th June 2006, 1.5.532.0 on 30th May 2006, 1.5.530.0 on 23rd May 2006, 1.5.526.0 on 26th April 2006.
More information on WGA Validation Tool (KB892130) and WGA Notifications (KB905474) which install LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe.
With new release of WGA, some methods no longer works, and some has been updated. Several methods that has certain success on certain people, you may try until you success.
Official Method by Microsoft – more information here.
First Method
- Lauch Windows Task Manager.
- End wgatray.exe process in Task Manager.
- Restart Windows XP in Safe Mode.
- Delete WgaTray.exe from c:\Windows\System32.
- Delete WgaTray.exe from c:\Windows\System32\dllcache.
- Lauch RegEdit.
- Browse to the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Winlogon\Notify - Delete the folder ‘WgaLogon’ and all its contents
- Reboot Windows XP.
Note: With this method, you may be prompted to install WGA Notifications again which can still be unselected.
Second Method
Another alternative suggested by dman is by using System Restore to restore the PC to a previous restore point that WGA Notifications hasn’t kicked in, and then carefully stop KB905474 from been applied to the system. To use System Restore, go to Start -> All Programs -> Accessories -> System Tools -> System Restore.
Note: Again, you may be prompted again to install WGA Notification, so it must be bypassed.
Third Method updated
This method involves using a cracked version of LegitCheckControl.dll to replace the original copy of LegitCheckControl.dll, and thus bypass the WGA validation and make Microsoft believes that your copy of Windows is genuine. To get rid of WGA Notifications warning messages, the patched version of WgaLogon.dll and WgaTray.exe to replace the existing files.
To apply the patch by replacing the files manually, try to end the respective processes in the Task Manager before deleting the existing files. Most likely is you will have to restart your PC in Safe Mode in order to replacing the original copy of LegitCheckControl.dll and related files. However, there has been automatic updater and even cracked WGA installer that automatically apply the patched version of WGA files.
Latest Update for WGA version 1.5.708.0 latest
Download cracked and patched version of LegitCheckControl.dll with thanks to Danny.
Latest Update for WGA version 1.5.554.0 latest
Download cracked and patched version of LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe for v1.5.554.0 of Windows Genuine Advantage Validation Tool and WGA Notifications.
John suggested that it may be rolled out to reduce the frequency of ‘phone home’ feature. BetaNews has confirmed this and says Microsoft has completed the pilot phase for WGA Notifications, officially rolling out the anti-piracy reminders to Windows XP users worldwide. Anyway if Notifications Tools is patched, it won’t callbacks at all. Swissboy found that now there are 15 languages supported for KB905474 and offers solution.
General release version of Windows Genuine Advantage Notifications also has updated EULA which says installing of this update is optional. However, once installed, the update will become a permanent part of your Windows XP software, means you can’t uninstall it. The EULA also confirms that information about your system will be sent to Microsoft. You can just skip installing the KB905474 by clicking “I Decline” when shown the EULA. If you don’t want the Automatic Updates or Windows Updates to try install WGA Notifications again, click Don’t ask me to install these updates again at Decline EULA window.
Latest Update for WGA version 1.5.532.2
Version 1.5.532.2 of WGA Validation Tool and WGA Notifications is NOT YET mass released to all Windows system, so your system may not have this version.
WindowsXP-KB905474-ENU-x86-1.5.532.2-noWGA.exe (as suggested by swissboy) is the original setup of KB905474, but with the 3 files as mentioned above replaced with patched version and re-packed. You can view the contents with WinRAR or 7-Zip. Download here or here. (Removed due to compliant from Microsoft)
LegitCheckControl.dll-v1.5.532.2-Jun-02-2006.zip (as suggested by swissboy) contains hacked version of LegitCheckControl.dll which you have to replace manually over the existing dll in \Windows\System32 folder. Download here or here. (Deleted due to complaint from Microsoft)
new More automated WGA removal tool: RemoveWGA
Latest Update for WGA version 1.5.532.0
LegitCheckControl1.5.532.0.muiz.fixed.rar (suggested by Picard) is the patched LegitCheckControl.dll and can be download here or here (removed due to complaint from Microsoft).
If LegitCheckControl.dll alone doesn’t work, try to patch the other two WGA files too, namely WgaLogon.dll and WgaTray.exe. Download the the patches for 3 files here or here (Removed due to complaint from Microsoft). Overwrite the original files with these hacked version in \Windows\System32 folder. The patch should remove notifications nag screen and allows Windows Update.
There are also several automated tools that save the dirty works of have to manually overwrites and replaces the WGA applications.
WGAPatch905474 (suggested by SilverBullet) contains 905474.exe that will patch Windows to allow access to full (custom) Windows Update and get rid of nag screen. Download 905474.exe here or here (removed due to complaint from Microsoft).
There are also several patched WGANotify KB905474 installation setup which will install KB905474 WGAnotify with the 3 patched WGA files namely LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe. One of them is HotFix windowsxp-kb905474-enu-x86.exe suggested by DeaDMan Walking, which will after install, disable notifications nag screen and allows update. Download here, here or here (removed coz of Microsoft complaint).
WindowsXP-KB905474-ENU-x86-v1.5.532.0-noWGA.exe (suggested by Swissboy) is also the patched KB905474 setup file which is actually the original setup of KB905474, but with the 3 files replaced. Download it here or here (removed due to Microsoft compliant).
Old Updates
Version 1.5.530.0 of cracked LegitCheckControl.dll (suggested by chucko), can also be downloaded here or here (obsolete links, visit here for updates).
Use the latest cracked LegitCheckControl.dll by searching for “Windows.Genuine.Advantage.Validation.v1.5.526.0.CRACKED-ETH0″. Can also be downloaded here (obsolete link, update here). Cracked LegitCheckControl.dll also available here or here (obsolete links, updates available here). Once download the cracked dll, replace the LegitCheckControl.dll in \Windows\System32 folder with the cracked version. You may need to restart your PC in safe mode to replace the files.
Forth Method
Jules found that by disabling and renaming the files ‘WgaLogon.dll’ and ‘WgaTray.exe’ in C:\WINDOWS\system32 folder by using the program Unlocker seems to get rid of all the nags/popups.
Fifth Method
Clear the contents or create a new empty data.dat for WGA, and make data.dat Read-Only and Hidden as detailed here.
The following step basically is the same with the above data.dat method, only different is that you no need to create any file in the WGA data folder:
- Launch Windows Explorer and go to C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data
- Go to Tools -> Folder Option -> View.
- Select (click) Show Hidden Files and Folders option.
- Unselect (uncheck) Hide Protected Operating System Files option.
- Click OK.
- Delete everything in the data folder.
- Right click on data folder, and select Properties.
- Select (Check) Read-Only as the folder’s atributes.
- Click OK or Apply.
Update: After 30 May 2006 with the release of WGA 1.5.532.0, this method no longer works. If the data.dat is set to “Read-Only”, WGA may complains that the serial key from the file could not be read, making the WGA validation failed even with the cracked dll files. So just delete the file (and make sure the folder is not set to “Read-Only”), WGA will then automatically regenerate the file and create the key, so you will pass the validation if you have the correct patched dll installed.
Sixth Method
Another alternative suggest that three files are installed Windows XP System Folder for WGA:
\WINDOWS\system32\WgaLogon.dll
\WINDOWS\system32\WgaTray.exe
\WINDOWS\system32\LegitCheckControl.dll
The wgatray.exe process makes the check for genuine windows software. If WgaLogon.dll is denied execution right, that WinLogon is unable to call it to check on Windows validity and display notification package at boot, and since WgaLogon is also responsible for running and maintaining WgaTray.exe, no more tray popups either.
To change and disable the execute bit of WgaLogon.dll:
- Turn off Simple File Sharing in Tools -> Folder Options -> View tab.
- Right click WgaLogon.dll in Windows Explorer and open the Security Tab.
- Click Advanced button.
- Uncheck the Inherit box at the bottom.
- Click the Copy button.
- Click OK.
- Go through each listed user/group and remove the “Read & Execute” permission for WgaLogon.dll, leaving the “Read” permission as-is.
- Click OK to apply the permission changes.
- Close the file properties dialog.
- Restart the computer.
- Turn “Use simple file sharing” on (optional).
Optionally, steps suggested by PSNet which has the same effect – disabling WgaLogon.dll.
Note: Visit the a more tidy article on how to bypass and disable the WGA with various tricks and hacks or a host redirect method to make Windows genuine permanently.
More on…
Page 2: More methods and suggestions to bypass WGA
Page 3: How you can ‘upgrade’ the version of cracked DLLs by yourself
Related Articles
- Official Ways to Disable or Manually Uninstall the Microsoft Windows Genuine Advantage Notifications from Microsoft
- Windows Genuine Advantage (WGA) Validation Notifications KB905474 1.8.31.9 Crack
- Crack for Windows Genuine Advantage Notifications (KB905474) 1.7.17.0
- Remove, Bypass, Patch and Disable Microsoft Windows Genuine Advantage WGA Validation version 1.5.708.0 with LegitCheckControl.dll Crack
- Crack and Patch to Bypass and Disable WGA Genuine Windows Validation and Notifications version 1.5.554.0
- Windows Genuine Advantage Validation and Notifications 1.9.40.0 (WGA Patch Crack)
- Workaround to Disable and Remove OGA Office Not Genuine Notifications (Uninstall KB949810)
- Information on WGA Validation Tool (KB892130), WGA Notifications (KB905474) and Office Genuine Advantage (OGA)
- Windows Genuine Advantage Validation 1.5.723.1 Crack
- Download Windows Genuine Advantage Validation v1.8.32.0 WGA Crack
Entries (RSS)
June 30th, 2006 08:07
[...] In the meantime, if you’ve already been assimilated, be cautious. Various (and numerous) postings are popping up from people who have an apparently legitimate copy of Windows that WGA claims to be pirated. A common theme among these unfortunate souls is that their laptop was recently sent back to the manufacturer for some sort of service. My Digital Life has posted ways to disable and remove WGA Notification allowing you to take your Borg, at least, out of the Collective. [...]
June 30th, 2006 02:06
That patch software didn’t work for me. I did it in a very simple way. I selected the wgatray.exe file for deletion, and then I did place the “are you sure” box next to the taskmanager. Because when i would close wgatray, it would pop up again almost immediately. So I ended the process, and immediately deleted the exe file. Worked like a charm. I wrote a little batchfile which can come in handy maybe.
taskkill /IM wgatray.exe
del c:\windows\system32\wgatray.exe
ren c:\windows\system32\wgalogon.dll c:\windows\system32\wgablablabla.dll
del c:\windows\system32\legitcheckcontrol.dll
copy the text above, and save it as a bat file. than execute it. I hope this helps some of you to get rid of bills greed for money.
June 30th, 2006 00:55
Thank You swiss, I’ve used 2 of ur previous cracks and they worked wonderfully! Thanks again.
June 29th, 2006 23:50
@farish: Simply install the patched Update KB905474 v1.5.540.0, decribed as the ‘Third Method’ and all your problems and questions are gone (the you can switch to “on” or “off” like youn want).
The download link for the actual patched update KB905474 v1.5.540.0 you can find at page 15, comment #366.
June 29th, 2006 23:06
i used the second method by system restoring my computer and it worked properly… now can i update it because i switched “ON” the automatic update. so is thr any problems?should i switch it “off”?becouse it says “your system may be at risk” so i switched it “on”
pls give me some good news
thank you
June 29th, 2006 23:01
@S@vvY: If you have a have a fresh installed Windows XP just install directly my patched update KB905474 and everthing is already fixed.
@tyler: Very funny, the cracked update you offer contains exactly the by myself patched files, it’s just repacked (but my one is smaller packed).
… so I suggest better take the “original” made by me:
The actual patched update KB905474 v1.5.540.0 you can find at page 15, comment #366.
June 29th, 2006 22:12
Here’s the link to the patch I mentioned in my previous comment:
http://rapidshare.de/files/24330583/Cracked_KB905474_Hotfix.rar.html
June 29th, 2006 22:01
@ swissboy…
I’ve got the file from ur post #366 on pg 15, I install it even on windows (not in safe mode), then restart system, everything gets back to normal again.
Would like to ask you just for knowledge, if for e.g I have a fresh installed xp, then quickly replace just the LegitCheckControl.dll version 1.5.540.0 (even before accessing to the internet for the 1st time, will this help by pass the check and allow updates download?
Thanks so much…
June 29th, 2006 21:53
This fix is out now:
WindowsXP-KB905474-x86-1.5.540.0-noWGA.exe
Worked perfectly for me. No nags and Microsoft Update works as expected.
June 29th, 2006 21:18
Just to tell you that if you set your antivirus software to block “legitcheckcontrol.dll”. you will not see any adverts on your desktop and I supose it will work on all versions of WGA… (I’m using Kaspersky)
Bye everybody and tell me if it works
(excuse my english…)
June 29th, 2006 14:18
[...] Removing Windows Genuine Advantage notifications nag screen is so easy with this step-by-step instructions. [...]
June 29th, 2006 12:17
@Execut3r: You can directly apply the patched update v1.5.540.0 over the v1.5.532.2 update.
The actual patched update KB905474 v1.5.540.0 you can find at page 15, comment #366.
June 29th, 2006 08:55
About the update in post #366, should we first install the update through windowsupdateblabla.com, and then apply the cracked files? Or directly apply the cracked files over the 532 update?
Thanks for any answer [:
June 29th, 2006 08:52
Thank you swissboy you are an ace.
Do you have any information on the OGA (Office Genuine Advantage)? Is there a fix around or is it possible to remove it any other way?
June 29th, 2006 06:11
Is Microsoft about to release a Windows “kill switch”?
Posted by Ed Bott @ 8:06 am
Digg This!
Two weeks ago, I wrote about my serious objections to Microsoft’s latest salvo in the war against unauthorized copies of Windows. Two Windows Genuine Advantage components are being pushed onto users’ machines with insufficient notification and inadequate quality control, and the result is a big mess. (For details, see Microsoft presses the Stupid button.)
Guess what? WGA might be on the verge of getting even messier. In fact, one report claims WGA is about to become a Windows ‘kill switch’ , and when I asked Microsoft for an on-the-record response, they refused to deny it.
Last week, a correspondent on Dave Farber’s Interesting People list posted some comments about his experiences with Windows OneCare Live. In the middle of the post, he added this tidbit:
I like to review updates before they are installed. The only update that I have not installed is the latest WGA because of the security issues related to it.
I called Microsoft support to see if there is a hidden option to say, “yep, I’ve got updates turned to manual, it’s okay.” The rep said, “No and why wouldn’t you want to get the latest updates to Windows.”
I responded with the issues relating to WGA. He spent some time telling me that WGA was a good thing, etc. I reiterated that I have accepted all the updates except WGA and just want to review the updates before they’re installed on my machine.
He told me that “in the fall, having the latest WGA will become mandatory and if its not installed, Windows will give a 30 day warning and when the 30 days is up and WGA isn’t installed, Windows will stop working, so you might as well install WGA now.” [emphasis added]
I’m wondering if Microsoft has the right to disable Windows functionality or the OS as a whole (tantamount to revoking my legitimate Windows license) if I do not install every piece of software that they send it updates.
That can’t be true, can it? I’m always suspicious of any report that comes from a front-line tech support drone, so I sent a note to Microsoft asking for an official confirmation or, better yet, a denial. Instead, I got this terse response from a Microsoft spokesperson:
As we have mentioned previously, as the WGA Notifications program expands in the future, customers may be required to participate. [emphasis added] Microsoft is gathering feedback in select markets to learn how it can best meet its customers’ needs and will keep customers informed of any changes to the program.
That’s it. That’s the entire response.
Uh-oh. Currently, Windows users have the ability to opt out of the Windows Genuine Advantage program and still get security patches and other Critical Updates delivered via Windows Update. The only thing you give up is the ability to download optional updates. Hackers have been working overtime to find ways to disable WGA notification. If WGA becomes mandatory, would it mean that Microsoft could prevent Windows from working if it determines – possibly erroneously – that your copy isn’t ‘genuine’? That’s a chilling possibility, and Microsoft refuses an easy opportunity to deny that that option is in its plans.
Over at Ed Bott’s Windows Expertise, I’ve been soliciting feedback from Windows users who’ve been burned by WGA. So far, I’ve received 20 comments. Here’s a sampling:
I have an XP Media center with a promise RAID 0 4-disc array. When I installed the WPA it broke the drivers for the array by causing failed delayed writes (half of the array just ‘disapears’.) If I do a system restore to before the installation of the WPA everything goes back to working just fine.
[S]ince installing WPA , I’ve had blue screens and a total inability to boot. I had to run the XP repair function to get the computer to boot. I had a damaged boot sector on the hard drive. I am running two drives on a RAID 1 config.
I purchased a SEALED OEM copy of XP Professional. WGA said the license key was already used. I called MS and they said I should uninstall and buy another copy. I told them I wasn’t made of money and hung-up.
Microsoft rejected the product key that came with the ThinkPad I’m using. I had to call in and they gave me another code to enter which supposedly worked but now I get the blue screen of death about every other time I reboot. I’ve also lost all internet connectivity.
I sent my Compaq Presario notebook for service repair, and it fails the WGA check. I have a legal version of windows xp professional on it. But I have no way to correct this problem.
What’s most disturbing about this whole saga is Microsoft’s complete lack of transparency on the issue. And before the ABM crowd jumps in with predictable ‘What did you expect?’ comments, let me argue that Microsoft actually has a fairly good track record on transparency issues in recent years. Windows Product Activation is very well documented, and when a similar uproar occurred in 2001, it was squelched quickly by some fairly prominent postings from high-level executives who provided details without a lot of spin. Likewise, the Microsoft Security Response Center has done an exceptional job at providing quick responses to security issues. (Just ask Adam Shostack.)
Currently, no one at Microsoft is blogging about this fiasco. No executive has been quoted on the record about it. There are very few technical details available, and those that have been published are being tumbled through the spin machine and spit out as press releases.
If Microsoft really does plan to turn WGA into a kill switch in September, be prepared for an enormous backlash.
http://blogs.zdnet.com/Bott/index.php?p=84
June 29th, 2006 05:21
@diehard45fr: Yes, because now version 1.5.540.0 is actual!
This version of the patched update you
can find at page 15 comment #366.
June 29th, 2006 05:09
sorry to say swissboy but your last version from June 28th, 2006 04:24 is no longer removing WGA 1.5.05032.2 but removal from Le Chicche di Cala is working great.
Thanks Le Chicche di Cala !
June 29th, 2006 05:04
@Le Chicche di Cala: The RemoveWGA Tools is crap, especialy for the future:
For my opinion their at the moment two realy good solutions around:
- My patched Update KB905474, see page 15 comment #366.
- The Universal WGA/OGA Patcher by HANDLE, see page 15 comment #374.
June 29th, 2006 04:18
Hi Swissboy, i tried the official wga remover, and i woul like to Know what do you think of that:
http://www.firewallleaktester.com/removewga.htm
Is a good solution for 1.5.540.0 too and also for Wga of the future? I know your new method , i want only now about the wga remover.
Thanks for me you are sempli fantastic!
June 29th, 2006 02:02
@rahul
“but when i try to install the package, it again asks for the validation and this time validation failed..what shud i do?”
Download it again:
——————
http://ghost168.bravehost.com/WgaPatch905474.zip
Now includes this EVERLASTING patch:
————————————
WilderSecurity
June 28th, 2006 22:56
[...] Crack Windows WGA Validation thingy [...]
June 28th, 2006 21:40
Windows Kill Switch Coming?…
Windows Genuine Advantage is Microsofts way of making sure you’re running a legal version of Windows. WGA is pretty easy to break, as demonstrated in this post at My Digital Life. WGA is currently optional but may be required in the coming mont…
June 28th, 2006 21:39
The manufacture of my PC is now out of business. The legitimate license they were using to activate Windows XP OS on the computers they built has now been cancelled. The OEM CD and all of the different Product Key Numbers that reside in the hidden-encrypted file installed, on the hard drive, have also been blacklisted axed and invalided by MS. So, the file is now obsolete and every Product Key on that CD/HD will no longer validate as genuine.
Does anyone know how to delete and replace this file using another Valid MS OS Product Key File?
Thanks!
June 28th, 2006 21:18
Do you think that the WgaPatch from Ghost168 is a trusted one?
June 28th, 2006 21:11
The wga built into things like ie7 is a sperate issue to bypassing wga for accessing downloads.
If you search the net for “ie7 wga crack” you should be able to find out what to do. I thought there was an articla bout it on this site, but I can’t find it if there is.