Disable and Remove Windows Genuine Advantage Notifications Nag Screen
The “Windows Genuine Advantage Notification” (KB905474) cannot be uninstalled by Add/Remove Program in Control Panel by default, contrary to the claim in the knowledge base article. To enable the removal of KB905474 WGA Notification tool, follow the below steps:
Note: It seems like it’s not possible to uninstall WGA Notifications from Add/Remove Program. Cobolhacker has details on why KB905474 cannot be uninstalled. Suggested steps to “uninstall” are search and delete all WgaTray.exe and WgaLogon.dll files in your boot drive (if you using search, check the “Search system folders”, “Search hidden files and folders” and “Search subfolders” checkboxes), delete all the register keys in the following tree: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, and to remove the entry from Add/Remove Programs list, delete the registry key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Uninstall\WgaNotify. With uninstallation, WGA Notifications will try to install again next time.
- Click on Start.
- Click on Run.
- Type in regedit in the Run text box.
- Click OK or press Enter.
- In Registry Editor, browse the the following registry key branch:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\WgaNotify - On the right panel, modify the value of NoRemove (by right clicking on the key and choose Modify) to 0.
- Exit the Registry Editor.
- Re-launch the Add/Remove Program, and Windows Genuine Advantage Notifications (KB905474) is now removable.
Prevention is always better than cure. So the best to avoid the the KB905474 Windows Genuine Advantage Notification application to be automatically downloaded and applied by Automatic Updates is to disable Automatic Updates. Go to Automatic Updates in Control Panel and disable it by selecting Turn off Automatic Updates, or if you still want to receive the critical patches from Microsoft, select Download updates for me, but let me choose when to install them or Notify me but don’t automatically download or install them. Remember to uncheck (deselect) Windows Genuine Advantage Notification (KB905474) when prompted to install any updates.
If you have already install the WGA update, you can use the hacked/cracked version of LegitCheckControl.dll (newer version suggestion by tyler) to remove the annoying nagging message. (For old version) But Windows Update will still ask you to install it since it’s a newer version which is 1.5.526, unless there is newer version of cracked LegitCheckControl.dll available. You may however try to “up” the version of hacked LegitCheckControl.dll yourself by using the following method:
- Get the patched/hacked “LegitCheckControl.dll” from the internet (e.g from link above or any file sharing service)
- Install Resource Hacker if you still don’t.
- Open both (original in Windows/System32 and hacked version) “LegitCheckControl.dll” files with Resource Hacker.
Go to “Version Info”, replace the version info of the patched File with the version information from new original LegitCheckControl.dll.1 VERSIONINFO
FILEVERSION 1,5,526,0
PRODUCTVERSION 1,5,526,0
FILEOS 0×4
FILETYPE 0×1
{
BLOCK “StringFileInfo”
{
BLOCK “040904B0″
{
VALUE “CompanyName”, “Microsoft Corp.”
VALUE “FileDescription”, “Windows Genuine Advantage Validation”
VALUE “InternalName”, “LegitCheckControl”
VALUE “LegalCopyright”, “Copyright © 1995-2004 Microsoft Corp.”
VALUE “LegalTrademarks”, “Microsoft® is a registered trademark of Microsoft Corporation.”
VALUE “OriginalFilename”, “LegitCheckControl.dll”
VALUE “ProductName”, “Microsoft® CoReXT”
VALUE “FileVersion”, “1.5.0526.0?
VALUE “ProductVersion”, “1.5.0526.0″
VALUE “PrivateBuild”, “Built by gacald on WGA-FILE-SVR.”
}
}BLOCK “VarFileInfo”
{
VALUE “Translation”, 0×0409 0×04B0
}
} - Save File.
- Put the modified version of hacked LegitCheckControl.dll in Windows/System32 folder, replacing the original from Microsoft.
Beside, WGA Notifications tool is also reported to be able to be bypassed by emptying (deleting the contents of) the data.dat in C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data as detailed here.
If you disable Automatic Updates, you can always download any updates from Windows Update or Microsoft Update using the hacks and tips from here and here. If you are prompted to mandatory must install KB905474, the above tricks should disable the checking of existence of KB905474 notification application. Again, remember to deselect the Windows Genuine Advantage Notification (KB905474) which will listed in High Priority section and selected for you by default.
Note: Visit the a more tidy article on how to bypass and disable the WGA with various tricks and hacks or a host redirect method to make Windows genuine permanently.
Related Articles
- Official Ways to Disable or Manually Uninstall the Microsoft Windows Genuine Advantage Notifications from Microsoft
- Windows Genuine Advantage (WGA) Validation Notifications KB905474 1.8.31.9 Crack
- Crack for Windows Genuine Advantage Notifications (KB905474) 1.7.17.0
- Remove, Bypass, Patch and Disable Microsoft Windows Genuine Advantage WGA Validation version 1.5.708.0 with LegitCheckControl.dll Crack
- Crack and Patch to Bypass and Disable WGA Genuine Windows Validation and Notifications version 1.5.554.0
- Windows Genuine Advantage Validation and Notifications 1.9.40.0 (WGA Patch Crack)
- Workaround to Disable and Remove OGA Office Not Genuine Notifications (Uninstall KB949810)
- Information on WGA Validation Tool (KB892130), WGA Notifications (KB905474) and Office Genuine Advantage (OGA)
- Windows Genuine Advantage Validation 1.5.723.1 Crack
- Download Windows Genuine Advantage Validation v1.8.32.0 WGA Crack
Entries (RSS)
March 11th, 2009 07:33
Thanks Jake, it worked like a charm.
No more nasty nag screens. F@#$ microsoft!!!
March 10th, 2009 03:39
Please help
(please read former mail below)
… I have now deleted ‘wgaLogon.dll’. Is that the same as C:\Windows\System32\dllcache? It was placed in C:\Windows\System32, Or should I restore it (its in my recycle bin)
Thanks
March 10th, 2009 03:29
Please help.
I removed genuine by use of method 1, but I could not find “:\Windows\System32\dllcache” and delete as point 5 in method 1 requires me to do. I completed all other points and the ’star’ is gone, but is this good enough or what should I do?
Method 1 – point 5. Delete WgaTray.exe from c:\Windows\System32\dllcache
Thanks
March 9th, 2009 18:08
Never mind. Just figured it out
March 9th, 2009 17:49
Hi,
Trying to use method 1, but what does it mean to “Lauch RegEdit.”? Please help. Not really that computersmart… thanks
March 9th, 2009 15:15
each time I closed the wgaTray.exe in the Task Manager as per method #1 it kept re-starting itself
I tried method #4 and it seem to have worked
Thanks!
March 1st, 2009 19:10
I say that the most simplest method to remove WGA from your computer is to follow the very first method given and then just adding to that also….
TURN OFF AUTOMATIC UPDATES.
your done removing it completely.. and it ain’t coming back.
February 26th, 2009 10:39
in version 1.8.31.9 i couldn’t delete the file in safe mode so I deleted the reg file in safe and rebooted. it has worked so far………….until the next fix.
February 25th, 2009 15:37
Dear hasit
Just click on start menu
In run command type regedit
then follow the same procedure which is mention in first solution.
First Method
1. Lauch Windows Task Manager.
2. End wgatray.exe process in Task Manager.
3. Restart Windows XP in Safe Mode.
4. Delete WgaTray.exe from c:\Windows\System32.
5. Delete WgaTray.exe from c:\Windows\System32\dllcache.
6. Lauch RegEdit.
7. Browse to the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Winlogon\Notify
8. Delete the folder ‘WgaLogon’ and all its contents
9. Reboot
Windows XP.
February 25th, 2009 15:31
Thank you very much dude i got solution becoz of ur site……….
February 24th, 2009 21:15
Hi, I just deleted the blue star icon in the system tray that had the text “Get Genuine Office.” highlighted when the cursor goes over the top.
Even in safe mode I couldn’t delete the file in system32. Here’s what you do:
1. Open up C:\WINDOWS\System 32\
2. Open up the task manager, click the processes tab.
3. In the windows folder you opened in step 1, find the WgaTray.exe file and click it ONCE to highlight it.
4. Find the same process in the Task Manager, again clicking once to highlight it.
5. Now, you have to do this kinda quick (within a couple seconds anyway). Go back the the windows folder, delete the file. It will ask for confirmation to send it to the Recycle Bin.
6. Click “OK” then immediately switch to the Task Manager and click “End Process”.
7. It will end process and then delete the file. Then the blue star icon will disappear from your system tray.
Thanks for all the tips, that was actually really easy!!
February 24th, 2009 13:38
Dear my guys its no need to delete WgaTray.exe in safemode as I have faced this issue over three years ago by performing the windows update we all got this file to our pc I have simply deleted directly from system32 folder no need to worry anymore as it is nothing harmful just an nagging messages appears its simply we have simply untick the file named windows genuine or something like I dont remember as it was happened to me three years so simple it is
February 19th, 2009 13:35
It wouldn’t let me delete the WgaTray.exe file when I rebooted in safe mode, so I rebooted again in safe mode but this time asked for the command prompt. Then I relied on my rusty old MSDOS skills to delete the file with no problem. Rebooted and no more nagging messages! Thanks for the tips!
February 19th, 2009 04:07
The file wgaTray.exe would not delete. Instead I renamed the file to wga.exe and the file wga.ini seemed to disappear. I turned off my computer and rebooted and all was once again beautiful. I had a similar problem with Media Player 11. In add/remove programs, I deleted anything that said Windows Media Player 11, and it rolled me back to my previous version which is 10 and works just fine. Microsoft has no right to install spyware like they did. To hell with them. My next computer will be a Mac.
February 16th, 2009 11:14
Thanks So Much, 1st Method It’s work for me, pls careful when u end wgatray.exe process in task manager.It very quickly new wgatray.exe.
February 12th, 2009 14:31
email me at nabeel.liaqat@gmail.com
i will tell u…bye
February 12th, 2009 13:40
you can also manually delete the files namely…WgaLogon(2)(2).dll and WgaLogon.dll by going to the system 32 folder in C:WINDOWS folder.
i did that for mine and it worked….happy mending
February 9th, 2009 14:18
where is regedit.?
tnx
i cant find it
nid some help here
February 5th, 2009 07:35
Just FYI, “Forth” in “Forth Method” should be spelled “Fourth”. That “forth” means something totally different. Example: “Lazarus, come forth!”
Nevertheless, thanks so much for the information regarding WGA notification removal. Thankfully, I decided NOT to install the WGA update in the first place. So I don’t have to remove anything. Still, it’s good to know there’s a place (here) I can get information on how to remove it, if I ever need to.
February 2nd, 2009 13:25
Hey tanx crystal it worked foe me too
)
Cheers !!
January 27th, 2009 18:15
iam satisfied for ur suggestion.i sloved “microsoft geniune software counterfiting” problem. thanking you for support.
thanks,
b.anilkumar.
January 11th, 2009 21:17
artikel yang sangat bagus sekali dan sangat membantu.maturnuwun………
January 3rd, 2009 22:22
A very quick solution is to restore your system to an earlier date by going to
STart, All programs
Accessories
System Tools
System restore
and just pick a date that you know that warning wasn’t on there. You will not lose anything.
Then go in and change your windows update settings in the control panel, so that it doesn’t do it automatically, it let’s you know what it wants to download and install updates.
Never choose the Microsoft Genuine Software notification and it will never re-appear. Hopefully.
It worked for me!
January 2nd, 2009 20:44
I have some solutions to your problems too!!!!!!!!!!!!!! i know that if you end the process in the task manager you will have some troubles in using ur computer……
there are two main problems:
no.1=your desktop background turns black right???
no.2=the audio device does not function properly even if you already have it…
but theres one more;to others there audio device controls went gray…..i know all the solutions there hahaha!
EMAIL ME AT velascoaaron@yahoo.com when u want answers…..
January 1st, 2009 19:33
Here is my Metod: No.15 + Write Protect for the User “System” only for this entries:
1.Write this in regedit:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WPAEvents]
“OOBETimer”=hex:ff,d5,71,d6,8b,6a,8d,6f,d5,33,93,fd
“LastWPAEventLogged”=hex:d5,07,05,00,06,00,07,00,0f,00,38,00,24,00,fd,02
2.Right klick on “WPAEvents” and set there Write Protect for the User “System”
The Aktivation is then forever!
The other Entries (Digital Product ID…)You can copy and paste from Your Original and aktivatet OEM PC (e.g.Notebook) and so You have copy your Legal OEM System to a second PC.
Thanks all, who help me!
The Rudi