Disable and Remove Windows Genuine Advantage Notifications Nag Screen
This page has been updated, visit the new article on how to bypass and disable the WGA or way to make your Windows genuine permanently.
Microsoft has released WGA Notifications application which effectively turned Microsoft Windows operating system into a ‘nagware’, with a “This copy of Windows is not genuine” warning. What the Windows Genuine Advantage Notifications application does what it will check your Microsoft Windows XP validity. If it found that the copy of Windows XP is not validated, not genuine, counterfeit, unlicensed, pirated, illegal, unauthorised or simply failed the Windows Genuine Advantage validation process, then the notification messages will appear at various places and time.
Disclaimer: This article is for informational and educational purpose only, as most information is found on various part of Internet. Readers should contacts Microsoft if their licensed or OEM software cannot be validated or purchase genuine software.
When you log on to a non-genuine copy of Windows XP, the following notification error message “This copy of Windows is not genuine” will pop-up on the logon process:
And the nicely said “You may be a victim of software counterfeiting” message on the bottom right corner of log-in screen:
Microsoft allows Windows faithfuls to have 2 options: Get Genuine or Resolve Later. Click on Resolve Later will temporarily bypass the notification and let you login into and use Windows nagged with notification icon and messages, which will randomly appear as balloon notification message with an icon in the notification area (system tray).
Clicking on the balloon notification or the notification area icon will lead you to the Windows Genuine Advantage Validation Failure Web page that contains the specifics of the validation failure and the steps that you can take to make the operating system genuine.
To get rid of the WGA notifications that intends to remind you that your Windows is not validated, you can buy a validly licensed copy of genuine Microsoft Windows.
Update: Bypass WGA Validation with Crack or Hack and Disable WGA Notifications Warning Message Workarounds
Latest Version: 1.5.554.0 on October 2006 (distribute to some computers with no known roll-out pattern), 1.5.708.0 on September 2006 (distribute to whoever wants to download from Microsoft Download Center), 1.5.540.0 on 28th June 2006, 1.5.532.2 on 6th June 2006, 1.5.532.0 on 30th May 2006, 1.5.530.0 on 23rd May 2006, 1.5.526.0 on 26th April 2006.
More information on WGA Validation Tool (KB892130) and WGA Notifications (KB905474) which install LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe.
With new release of WGA, some methods no longer works, and some has been updated. Several methods that has certain success on certain people, you may try until you success.
Official Method by Microsoft – more information here.
First Method
- Lauch Windows Task Manager.
- End wgatray.exe process in Task Manager.
- Restart Windows XP in Safe Mode.
- Delete WgaTray.exe from c:\Windows\System32.
- Delete WgaTray.exe from c:\Windows\System32\dllcache.
- Lauch RegEdit.
- Browse to the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Winlogon\Notify - Delete the folder ‘WgaLogon’ and all its contents
- Reboot Windows XP.
Note: With this method, you may be prompted to install WGA Notifications again which can still be unselected.
Second Method
Another alternative suggested by dman is by using System Restore to restore the PC to a previous restore point that WGA Notifications hasn’t kicked in, and then carefully stop KB905474 from been applied to the system. To use System Restore, go to Start -> All Programs -> Accessories -> System Tools -> System Restore.
Note: Again, you may be prompted again to install WGA Notification, so it must be bypassed.
Third Method updated
This method involves using a cracked version of LegitCheckControl.dll to replace the original copy of LegitCheckControl.dll, and thus bypass the WGA validation and make Microsoft believes that your copy of Windows is genuine. To get rid of WGA Notifications warning messages, the patched version of WgaLogon.dll and WgaTray.exe to replace the existing files.
To apply the patch by replacing the files manually, try to end the respective processes in the Task Manager before deleting the existing files. Most likely is you will have to restart your PC in Safe Mode in order to replacing the original copy of LegitCheckControl.dll and related files. However, there has been automatic updater and even cracked WGA installer that automatically apply the patched version of WGA files.
Latest Update for WGA version 1.5.708.0 latest
Download cracked and patched version of LegitCheckControl.dll with thanks to Danny.
Latest Update for WGA version 1.5.554.0 latest
Download cracked and patched version of LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe for v1.5.554.0 of Windows Genuine Advantage Validation Tool and WGA Notifications.
John suggested that it may be rolled out to reduce the frequency of ‘phone home’ feature. BetaNews has confirmed this and says Microsoft has completed the pilot phase for WGA Notifications, officially rolling out the anti-piracy reminders to Windows XP users worldwide. Anyway if Notifications Tools is patched, it won’t callbacks at all. Swissboy found that now there are 15 languages supported for KB905474 and offers solution.
General release version of Windows Genuine Advantage Notifications also has updated EULA which says installing of this update is optional. However, once installed, the update will become a permanent part of your Windows XP software, means you can’t uninstall it. The EULA also confirms that information about your system will be sent to Microsoft. You can just skip installing the KB905474 by clicking “I Decline” when shown the EULA. If you don’t want the Automatic Updates or Windows Updates to try install WGA Notifications again, click Don’t ask me to install these updates again at Decline EULA window.
Latest Update for WGA version 1.5.532.2
Version 1.5.532.2 of WGA Validation Tool and WGA Notifications is NOT YET mass released to all Windows system, so your system may not have this version.
WindowsXP-KB905474-ENU-x86-1.5.532.2-noWGA.exe (as suggested by swissboy) is the original setup of KB905474, but with the 3 files as mentioned above replaced with patched version and re-packed. You can view the contents with WinRAR or 7-Zip. Download here or here. (Removed due to compliant from Microsoft)
LegitCheckControl.dll-v1.5.532.2-Jun-02-2006.zip (as suggested by swissboy) contains hacked version of LegitCheckControl.dll which you have to replace manually over the existing dll in \Windows\System32 folder. Download here or here. (Deleted due to complaint from Microsoft)
new More automated WGA removal tool: RemoveWGA
Latest Update for WGA version 1.5.532.0
LegitCheckControl1.5.532.0.muiz.fixed.rar (suggested by Picard) is the patched LegitCheckControl.dll and can be download here or here (removed due to complaint from Microsoft).
If LegitCheckControl.dll alone doesn’t work, try to patch the other two WGA files too, namely WgaLogon.dll and WgaTray.exe. Download the the patches for 3 files here or here (Removed due to complaint from Microsoft). Overwrite the original files with these hacked version in \Windows\System32 folder. The patch should remove notifications nag screen and allows Windows Update.
There are also several automated tools that save the dirty works of have to manually overwrites and replaces the WGA applications.
WGAPatch905474 (suggested by SilverBullet) contains 905474.exe that will patch Windows to allow access to full (custom) Windows Update and get rid of nag screen. Download 905474.exe here or here (removed due to complaint from Microsoft).
There are also several patched WGANotify KB905474 installation setup which will install KB905474 WGAnotify with the 3 patched WGA files namely LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe. One of them is HotFix windowsxp-kb905474-enu-x86.exe suggested by DeaDMan Walking, which will after install, disable notifications nag screen and allows update. Download here, here or here (removed coz of Microsoft complaint).
WindowsXP-KB905474-ENU-x86-v1.5.532.0-noWGA.exe (suggested by Swissboy) is also the patched KB905474 setup file which is actually the original setup of KB905474, but with the 3 files replaced. Download it here or here (removed due to Microsoft compliant).
Old Updates
Version 1.5.530.0 of cracked LegitCheckControl.dll (suggested by chucko), can also be downloaded here or here (obsolete links, visit here for updates).
Use the latest cracked LegitCheckControl.dll by searching for “Windows.Genuine.Advantage.Validation.v1.5.526.0.CRACKED-ETH0″. Can also be downloaded here (obsolete link, update here). Cracked LegitCheckControl.dll also available here or here (obsolete links, updates available here). Once download the cracked dll, replace the LegitCheckControl.dll in \Windows\System32 folder with the cracked version. You may need to restart your PC in safe mode to replace the files.
Forth Method
Jules found that by disabling and renaming the files ‘WgaLogon.dll’ and ‘WgaTray.exe’ in C:\WINDOWS\system32 folder by using the program Unlocker seems to get rid of all the nags/popups.
Fifth Method
Clear the contents or create a new empty data.dat for WGA, and make data.dat Read-Only and Hidden as detailed here.
The following step basically is the same with the above data.dat method, only different is that you no need to create any file in the WGA data folder:
- Launch Windows Explorer and go to C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data
- Go to Tools -> Folder Option -> View.
- Select (click) Show Hidden Files and Folders option.
- Unselect (uncheck) Hide Protected Operating System Files option.
- Click OK.
- Delete everything in the data folder.
- Right click on data folder, and select Properties.
- Select (Check) Read-Only as the folder’s atributes.
- Click OK or Apply.
Update: After 30 May 2006 with the release of WGA 1.5.532.0, this method no longer works. If the data.dat is set to “Read-Only”, WGA may complains that the serial key from the file could not be read, making the WGA validation failed even with the cracked dll files. So just delete the file (and make sure the folder is not set to “Read-Only”), WGA will then automatically regenerate the file and create the key, so you will pass the validation if you have the correct patched dll installed.
Sixth Method
Another alternative suggest that three files are installed Windows XP System Folder for WGA:
\WINDOWS\system32\WgaLogon.dll
\WINDOWS\system32\WgaTray.exe
\WINDOWS\system32\LegitCheckControl.dll
The wgatray.exe process makes the check for genuine windows software. If WgaLogon.dll is denied execution right, that WinLogon is unable to call it to check on Windows validity and display notification package at boot, and since WgaLogon is also responsible for running and maintaining WgaTray.exe, no more tray popups either.
To change and disable the execute bit of WgaLogon.dll:
- Turn off Simple File Sharing in Tools -> Folder Options -> View tab.
- Right click WgaLogon.dll in Windows Explorer and open the Security Tab.
- Click Advanced button.
- Uncheck the Inherit box at the bottom.
- Click the Copy button.
- Click OK.
- Go through each listed user/group and remove the “Read & Execute” permission for WgaLogon.dll, leaving the “Read” permission as-is.
- Click OK to apply the permission changes.
- Close the file properties dialog.
- Restart the computer.
- Turn “Use simple file sharing” on (optional).
Optionally, steps suggested by PSNet which has the same effect – disabling WgaLogon.dll.
Note: Visit the a more tidy article on how to bypass and disable the WGA with various tricks and hacks or a host redirect method to make Windows genuine permanently.
More on…
Page 2: More methods and suggestions to bypass WGA
Page 3: How you can ‘upgrade’ the version of cracked DLLs by yourself
Related Articles
- Official Ways to Disable or Manually Uninstall the Microsoft Windows Genuine Advantage Notifications from Microsoft
- Windows Genuine Advantage (WGA) Validation Notifications KB905474 1.8.31.9 Crack
- Crack for Windows Genuine Advantage Notifications (KB905474) 1.7.17.0
- Remove, Bypass, Patch and Disable Microsoft Windows Genuine Advantage WGA Validation version 1.5.708.0 with LegitCheckControl.dll Crack
- Crack and Patch to Bypass and Disable WGA Genuine Windows Validation and Notifications version 1.5.554.0
- Windows Genuine Advantage Validation and Notifications 1.9.40.0 (WGA Patch Crack)
- Workaround to Disable and Remove OGA Office Not Genuine Notifications (Uninstall KB949810)
- Information on WGA Validation Tool (KB892130), WGA Notifications (KB905474) and Office Genuine Advantage (OGA)
- Windows Genuine Advantage Validation 1.5.723.1 Crack
- Download Windows Genuine Advantage Validation v1.8.32.0 WGA Crack
Entries (RSS)
July 26th, 2006 09:49
ok i want to be able to COMPLETELY bypass WGA. i have gone with method number 4 and dont have any anoying WGA validation messages but between all of the deleted links (because of microsoft complaining or what not) i cant seem to find a way to COMPLETELY bypass WGA. can some please help.
July 26th, 2006 09:48
@boyd & acrosknicht: This methods have two disadvantages. Windows Update will try to install the update KB905474 again and you still not have a patched LegitCheckControl.dll installed. Also is the installation of the patched update KB905474 more easy and quick. Simply install them, reboot and all your problems and questions are gone.
@Bony Tooth: The download offered by Albert in comment #495 is just a mirror of my patched update KB905474.
July 26th, 2006 09:05
I’m a “I know nothing about computers but I know I want to get rid of this WGA thing” person. So several of the proposed methods above just seemed too complicated for me. But last night I followed Albert July 25th, 2006 00:05, item 495 and it seemed to work a dream. Now I see boyd, July 26th, 2006 07:04 #498. It can’t be that simple surely? Why would swissboy and the other heroes go to such trouble devising cracks if it’s that simple?
July 26th, 2006 07:04
***FASTEST METHOD***
I had the most recent version of WGA as of July 25th, 2006 and removed it in ONE MINUTE. Go to system32 and give WgaLogon a txt extension. Change WgaTray to WgaTray.txt. Now open the taskmanager and end the Wga processes. That’s it!! The next time I restarted, I had my old computer back.
July 25th, 2006 23:25
It’s works it’s amazing, y use forth method everything it’s fine right now, thanks a lot. ^_^
July 25th, 2006 08:28
Howdy Folks!
Would someone be kind enough to e-mail (sandcrash at yahoo dot com)me v2.4 of Handle’s WgaOgaEN? v2.5 is not working for me and I accidentally trashed 2.4 off my USB key.
Thank you very kindly,
Sandcrash
July 25th, 2006 00:05
WindowsXP-KB905474-x86-1.5.540.0-noWGA or KB905474_Hotfix can be downloaded here.
July 24th, 2006 23:46
Version 1.5.540.0 of patched Windows Genuine Advantage Notification KB905474
The setup ist the original setup of KB905474, just with the 3 files replaced and new packed (can be also unpacked with WinRAR or 7-Zip).
The LegitCheckControl.dll is patched, the WgaLogon.dll and WgaTray.exe are just dummy files with no real functionality.
After installation you have full access to Windows Update and WGA checked downloads in the Microsoft Download Center. Also there are no more WGA notifications nag screens.
Simply install the patched Update KB905474 v1.5.540.0, decribed as the ‘Third Method’ and all your problems and questions are gone.
The patched patched update KB905474 still can be downloaded here (792KB).
(download managers have to be turned off for download)
July 24th, 2006 19:38
Rapidshare are now blocking that file from being uploded onto their service, and I don’t know how far it would have to be altered to bypass their filter.
Swissboy’s file is doing the rounds on numerous p2p file sharing services which are largely on ISP’s whose operational policies do not include appeasing dictators.
Do a search on the net for “swissboy + wga”.
If you are not familiar with using those sorts of services, then get someone to get the file for you that is, as there can be problems with viruses and spyware for the unwary.
July 24th, 2006 00:24
anyone have swissboys HaveFun155400.zip file. It’s been removed from rapidshare.
Thanks
July 23rd, 2006 11:47
You can do the first method without entering safe mode. With the latest version, the wgatray reloads itself instantly like a virus after being ended. Here is what I did:
I deleted wgatray.exe from the dllcache folder
then I went to the system32 folder and hit shift + delete on the wgatray.exe file, but do not click yes.
Now ctrl + alt + del and go to processes, find the wgatray process and click end. Do not click yes. Put this dialog and the other dialog right next to each other. Now end them in this order and very quick clicking. Process > yes to delete.
The file will be deleted before the wgatray can reload itself, and you can do this without going to safe mode. Then go into your registry and remove the files as demonstrated in step 1, I just searched for wgalogon.
Its gone after this, reboot or not.
July 23rd, 2006 08:40
swissboys method works like a charm.. tnx dude
July 22nd, 2006 02:01
A big thanx to Swissboy (terimakasih atas bantuannya)
Try it once and hhmmm..It worked amazingly…
Again thanx for yer help. (Terimakasih lagi atas bantuannya, Lu emang top banget dahhh..}
See ya..
July 21st, 2006 16:29
do u have a way to make microsoft.com thinks that u are really using a legit copy of windows?
what i mean is: microsoft.com will show “Validation Complete” or perhaps sumthing like that?
July 21st, 2006 14:08
will it work
July 21st, 2006 06:56
swissboy, thanks!
Found this site via Google, since I was tired of not having the ability to update my Windows. I think this site easily could be shortened by 98% if this new patch works for everybody. No 20+ article-list needed (and almost same amount of methods!).
Installed the patch, and it worked.
July 21st, 2006 00:57
Version 1.5.540.0 of patched Windows Genuine Advantage Notification KB905474
The setup ist the original setup of KB905474, just with the 3 files replaced and new packed (can be also unpacked with WinRAR or 7-Zip).
The LegitCheckControl.dll is patched, the WgaLogon.dll and WgaTray.exe are just dummy files with no real functionality.
Simply install the patched Update KB905474 v1.5.540.0, decribed as the ‘Third Method’ and all your problems and questions are gone.
Download here (790KB):
http://rapidshare.de/files/26425589/HaveFun155400.zip.html
July 20th, 2006 23:32
Naomi via email:
I thought you might like to know that the update that is allegedly supposed to notify you if you have a non-legit copy of XP, does not do so correctly for every PC.
I own a Dell PC with a pre-installed copy of XP (I called Dell tech support and verified that my copy was legit). Yet this notification insisted that I had a fake copy. Not only did the balloon keep popping up, it somehow restricted me from accessing certain websites that require login information (eg Yahoo, Hotmail).
I had to retore my PC to a previous system restore point in order to get things back to normal. To give Microsoft the benefit of the doubt, I installed all Windows updates again. This time, no message
popped up.
After all this trouble, I feel like getting a fake XP copy makes more sense than trying to do the right thing.
July 20th, 2006 21:04
ei swissboy, i cant happen to download your file on pg. 15, 366… rapidshare says that file was deleted, can u upload another one?? and maybe give us the link???
another question, does this have any side effects on the system??? tnz.. hopes it works on mine
July 20th, 2006 00:02
I suffer from the same plagiarism:
Contents copied by TMCNet
Anyone know a method to solve this?
July 19th, 2006 21:01
Read This:
[No arguments here]
July 19th, 2006 18:32
@Redbullet: Very funny, the cracked update you offer contains exactly the by myself patched files (I can see it at the date/time stamp). It’s just repacked and unfortunatly no more directly executable.
so I suggest better take the ‘original’ made by me:
The actual patched update KB905474 v1.5.540.0 you can find at page 15, comment #366.
July 19th, 2006 18:12
I found a fix tat works perfectly!!11
refer to swissboy comment above.
I can use Widnows Update now AND the messages are gone!!111one
July 18th, 2006 04:37
[QUOTE]# Ross
July 4th, 2006 04:32
423
Hi Ttio, Ive been searchin around for a new patch and I cant find one, do you know wot patch you used or where I can get it. Any info would be much appreciated.
Ross[Quote]
I think i used swiss boys but i cant install Microsoft software that validates twice when i downoad it says genuine but on ie7 it validates twice
any one have one where it trickes it completely!!!!!
you need kaspersky to get rid of the WGA update when you update you need a crack (its a extremly secure anti virus and a really good firewall it comes with a 30 day trial but u need a product key crack (it expires in the same day the next year) just run the installer in the folder to get it go here http://rapidshare.de/files/24883492/Kaspersky.Anti-Virus.v6.0.0.299.rar.html then just open the rar and click the folder then click the kaspersky installer
TRUST ME ON THIS IT WORKS I DONT BULLSH*T!!!!!!!
July 18th, 2006 04:11
[...] Como desabilitar as notificaes do WGA. [...]