Disable and Remove Windows Genuine Advantage Notifications Nag Screen
This page has been updated, visit the new article on how to bypass and disable the WGA or way to make your Windows genuine permanently.
Microsoft has released WGA Notifications application which effectively turned Microsoft Windows operating system into a ‘nagware’, with a “This copy of Windows is not genuine” warning. What the Windows Genuine Advantage Notifications application does what it will check your Microsoft Windows XP validity. If it found that the copy of Windows XP is not validated, not genuine, counterfeit, unlicensed, pirated, illegal, unauthorised or simply failed the Windows Genuine Advantage validation process, then the notification messages will appear at various places and time.
Disclaimer: This article is for informational and educational purpose only, as most information is found on various part of Internet. Readers should contacts Microsoft if their licensed or OEM software cannot be validated or purchase genuine software.
When you log on to a non-genuine copy of Windows XP, the following notification error message “This copy of Windows is not genuine” will pop-up on the logon process:
And the nicely said “You may be a victim of software counterfeiting” message on the bottom right corner of log-in screen:
Microsoft allows Windows faithfuls to have 2 options: Get Genuine or Resolve Later. Click on Resolve Later will temporarily bypass the notification and let you login into and use Windows nagged with notification icon and messages, which will randomly appear as balloon notification message with an icon in the notification area (system tray).
Clicking on the balloon notification or the notification area icon will lead you to the Windows Genuine Advantage Validation Failure Web page that contains the specifics of the validation failure and the steps that you can take to make the operating system genuine.
To get rid of the WGA notifications that intends to remind you that your Windows is not validated, you can buy a validly licensed copy of genuine Microsoft Windows.
Update: Bypass WGA Validation with Crack or Hack and Disable WGA Notifications Warning Message Workarounds
Latest Version: 1.5.554.0 on October 2006 (distribute to some computers with no known roll-out pattern), 1.5.708.0 on September 2006 (distribute to whoever wants to download from Microsoft Download Center), 1.5.540.0 on 28th June 2006, 1.5.532.2 on 6th June 2006, 1.5.532.0 on 30th May 2006, 1.5.530.0 on 23rd May 2006, 1.5.526.0 on 26th April 2006.
More information on WGA Validation Tool (KB892130) and WGA Notifications (KB905474) which install LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe.
With new release of WGA, some methods no longer works, and some has been updated. Several methods that has certain success on certain people, you may try until you success.
Official Method by Microsoft – more information here.
First Method
- Lauch Windows Task Manager.
- End wgatray.exe process in Task Manager.
- Restart Windows XP in Safe Mode.
- Delete WgaTray.exe from c:\Windows\System32.
- Delete WgaTray.exe from c:\Windows\System32\dllcache.
- Lauch RegEdit.
- Browse to the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Winlogon\Notify - Delete the folder ‘WgaLogon’ and all its contents
- Reboot Windows XP.
Note: With this method, you may be prompted to install WGA Notifications again which can still be unselected.
Second Method
Another alternative suggested by dman is by using System Restore to restore the PC to a previous restore point that WGA Notifications hasn’t kicked in, and then carefully stop KB905474 from been applied to the system. To use System Restore, go to Start -> All Programs -> Accessories -> System Tools -> System Restore.
Note: Again, you may be prompted again to install WGA Notification, so it must be bypassed.
Third Method updated
This method involves using a cracked version of LegitCheckControl.dll to replace the original copy of LegitCheckControl.dll, and thus bypass the WGA validation and make Microsoft believes that your copy of Windows is genuine. To get rid of WGA Notifications warning messages, the patched version of WgaLogon.dll and WgaTray.exe to replace the existing files.
To apply the patch by replacing the files manually, try to end the respective processes in the Task Manager before deleting the existing files. Most likely is you will have to restart your PC in Safe Mode in order to replacing the original copy of LegitCheckControl.dll and related files. However, there has been automatic updater and even cracked WGA installer that automatically apply the patched version of WGA files.
Latest Update for WGA version 1.5.708.0 latest
Download cracked and patched version of LegitCheckControl.dll with thanks to Danny.
Latest Update for WGA version 1.5.554.0 latest
Download cracked and patched version of LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe for v1.5.554.0 of Windows Genuine Advantage Validation Tool and WGA Notifications.
John suggested that it may be rolled out to reduce the frequency of ‘phone home’ feature. BetaNews has confirmed this and says Microsoft has completed the pilot phase for WGA Notifications, officially rolling out the anti-piracy reminders to Windows XP users worldwide. Anyway if Notifications Tools is patched, it won’t callbacks at all. Swissboy found that now there are 15 languages supported for KB905474 and offers solution.
General release version of Windows Genuine Advantage Notifications also has updated EULA which says installing of this update is optional. However, once installed, the update will become a permanent part of your Windows XP software, means you can’t uninstall it. The EULA also confirms that information about your system will be sent to Microsoft. You can just skip installing the KB905474 by clicking “I Decline” when shown the EULA. If you don’t want the Automatic Updates or Windows Updates to try install WGA Notifications again, click Don’t ask me to install these updates again at Decline EULA window.
Latest Update for WGA version 1.5.532.2
Version 1.5.532.2 of WGA Validation Tool and WGA Notifications is NOT YET mass released to all Windows system, so your system may not have this version.
WindowsXP-KB905474-ENU-x86-1.5.532.2-noWGA.exe (as suggested by swissboy) is the original setup of KB905474, but with the 3 files as mentioned above replaced with patched version and re-packed. You can view the contents with WinRAR or 7-Zip. Download here or here. (Removed due to compliant from Microsoft)
LegitCheckControl.dll-v1.5.532.2-Jun-02-2006.zip (as suggested by swissboy) contains hacked version of LegitCheckControl.dll which you have to replace manually over the existing dll in \Windows\System32 folder. Download here or here. (Deleted due to complaint from Microsoft)
new More automated WGA removal tool: RemoveWGA
Latest Update for WGA version 1.5.532.0
LegitCheckControl1.5.532.0.muiz.fixed.rar (suggested by Picard) is the patched LegitCheckControl.dll and can be download here or here (removed due to complaint from Microsoft).
If LegitCheckControl.dll alone doesn’t work, try to patch the other two WGA files too, namely WgaLogon.dll and WgaTray.exe. Download the the patches for 3 files here or here (Removed due to complaint from Microsoft). Overwrite the original files with these hacked version in \Windows\System32 folder. The patch should remove notifications nag screen and allows Windows Update.
There are also several automated tools that save the dirty works of have to manually overwrites and replaces the WGA applications.
WGAPatch905474 (suggested by SilverBullet) contains 905474.exe that will patch Windows to allow access to full (custom) Windows Update and get rid of nag screen. Download 905474.exe here or here (removed due to complaint from Microsoft).
There are also several patched WGANotify KB905474 installation setup which will install KB905474 WGAnotify with the 3 patched WGA files namely LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe. One of them is HotFix windowsxp-kb905474-enu-x86.exe suggested by DeaDMan Walking, which will after install, disable notifications nag screen and allows update. Download here, here or here (removed coz of Microsoft complaint).
WindowsXP-KB905474-ENU-x86-v1.5.532.0-noWGA.exe (suggested by Swissboy) is also the patched KB905474 setup file which is actually the original setup of KB905474, but with the 3 files replaced. Download it here or here (removed due to Microsoft compliant).
Old Updates
Version 1.5.530.0 of cracked LegitCheckControl.dll (suggested by chucko), can also be downloaded here or here (obsolete links, visit here for updates).
Use the latest cracked LegitCheckControl.dll by searching for “Windows.Genuine.Advantage.Validation.v1.5.526.0.CRACKED-ETH0″. Can also be downloaded here (obsolete link, update here). Cracked LegitCheckControl.dll also available here or here (obsolete links, updates available here). Once download the cracked dll, replace the LegitCheckControl.dll in \Windows\System32 folder with the cracked version. You may need to restart your PC in safe mode to replace the files.
Forth Method
Jules found that by disabling and renaming the files ‘WgaLogon.dll’ and ‘WgaTray.exe’ in C:\WINDOWS\system32 folder by using the program Unlocker seems to get rid of all the nags/popups.
Fifth Method
Clear the contents or create a new empty data.dat for WGA, and make data.dat Read-Only and Hidden as detailed here.
The following step basically is the same with the above data.dat method, only different is that you no need to create any file in the WGA data folder:
- Launch Windows Explorer and go to C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data
- Go to Tools -> Folder Option -> View.
- Select (click) Show Hidden Files and Folders option.
- Unselect (uncheck) Hide Protected Operating System Files option.
- Click OK.
- Delete everything in the data folder.
- Right click on data folder, and select Properties.
- Select (Check) Read-Only as the folder’s atributes.
- Click OK or Apply.
Update: After 30 May 2006 with the release of WGA 1.5.532.0, this method no longer works. If the data.dat is set to “Read-Only”, WGA may complains that the serial key from the file could not be read, making the WGA validation failed even with the cracked dll files. So just delete the file (and make sure the folder is not set to “Read-Only”), WGA will then automatically regenerate the file and create the key, so you will pass the validation if you have the correct patched dll installed.
Sixth Method
Another alternative suggest that three files are installed Windows XP System Folder for WGA:
\WINDOWS\system32\WgaLogon.dll
\WINDOWS\system32\WgaTray.exe
\WINDOWS\system32\LegitCheckControl.dll
The wgatray.exe process makes the check for genuine windows software. If WgaLogon.dll is denied execution right, that WinLogon is unable to call it to check on Windows validity and display notification package at boot, and since WgaLogon is also responsible for running and maintaining WgaTray.exe, no more tray popups either.
To change and disable the execute bit of WgaLogon.dll:
- Turn off Simple File Sharing in Tools -> Folder Options -> View tab.
- Right click WgaLogon.dll in Windows Explorer and open the Security Tab.
- Click Advanced button.
- Uncheck the Inherit box at the bottom.
- Click the Copy button.
- Click OK.
- Go through each listed user/group and remove the “Read & Execute” permission for WgaLogon.dll, leaving the “Read” permission as-is.
- Click OK to apply the permission changes.
- Close the file properties dialog.
- Restart the computer.
- Turn “Use simple file sharing” on (optional).
Optionally, steps suggested by PSNet which has the same effect – disabling WgaLogon.dll.
Note: Visit the a more tidy article on how to bypass and disable the WGA with various tricks and hacks or a host redirect method to make Windows genuine permanently.
More on…
Page 2: More methods and suggestions to bypass WGA
Page 3: How you can ‘upgrade’ the version of cracked DLLs by yourself
Related Articles
- Official Ways to Disable or Manually Uninstall the Microsoft Windows Genuine Advantage Notifications from Microsoft
- Windows Genuine Advantage (WGA) Validation Notifications KB905474 1.8.31.9 Crack
- Crack for Windows Genuine Advantage Notifications (KB905474) 1.7.17.0
- Remove, Bypass, Patch and Disable Microsoft Windows Genuine Advantage WGA Validation version 1.5.708.0 with LegitCheckControl.dll Crack
- Crack and Patch to Bypass and Disable WGA Genuine Windows Validation and Notifications version 1.5.554.0
- Windows Genuine Advantage Validation and Notifications 1.9.40.0 (WGA Patch Crack)
- Workaround to Disable and Remove OGA Office Not Genuine Notifications (Uninstall KB949810)
- Information on WGA Validation Tool (KB892130), WGA Notifications (KB905474) and Office Genuine Advantage (OGA)
- Windows Genuine Advantage Validation 1.5.723.1 Crack
- Download Windows Genuine Advantage Validation v1.8.32.0 WGA Crack
Entries (RSS)
June 10th, 2006 15:43
Method one 100% fixed the problem.. fast and easy thank you so much..
June 10th, 2006 12:53
just download this ..
windowsxp-kb905474-enu-x86_4bafa8793e8cdcaf4ba4ffc494df32d496154544.exe
works 100% for me.
June 10th, 2006 10:55
PROBLEM SOLVED!
As it turned out, my WGA active X control was disabled. I re-enabled it via “Add Ons” and it worked!
I have no idea why I am able to enable and disable the WGA active X control because previously MS had disabled/greyed out this option.
Anyway, once I enabled it, everything was fine and I’m able to receive updates.
June 10th, 2006 10:41
@JOEMAMA: This ist a problem of corrupt Windows Update on your system and not of the WGA-Patch. Try to search in the web for solutions how to correct it. Sorry, I’m not have a quick solution for you ready to this specific problem.
June 10th, 2006 10:33
@ swissboy
I have the correct date stamp 06-07-2006 and the version 1.5.532.2.
The screen I am seeing is this one:
Genuine Windows Validation
[ Support ID: 0x8DDD100F ]
To get updates, you must first validate your Windows software. Validation assures that you are using an authentic and fully licensed copy of Windows.
Then, when I try to validate Windows, I get this:
Validation Incomplete: Unable to Perform Validation[0x80080299]
Why didn’t my machine complete validation?
You have encountered an unknown error. Please contact your local product support team for further assistance with this issue.
June 10th, 2006 10:31
@JOEMAMA: What you understand exactly under “the WGA validation screen”?
Please validate also that the LegitCheckControl.dll in your \Windows\system32 folder have the date stamp 06-07-2006 and the version 1.5.532.2.
June 10th, 2006 10:25
I restored the registry and still have noe luck.
I deleted the data.dat file in the C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data folder.
I’m wondering if this has something to do with it.
However, I don’t have the data.dat file anymore.
June 10th, 2006 10:19
As mentioned by PBLEE, if you did registry hack to the WGA, then try to restore the registry setting to the original first before applying the patch.
June 10th, 2006 10:16
@ swissboy
I just removed WGA altogether and installed what you told me to install in your last post.
Restarted the computer – went to windows update and I am prompted with the WGA validation screen…
I’m confused.
June 10th, 2006 10:05
@JOEMAMA:The “Third Method” still work, I just have test it again a few minutes before I wrote this comment.
Just download the “WindowsXP-KB905474-ENU-x86-1.5.532.2-noWGA.exe”, install it and reboot your system.
June 10th, 2006 09:48
swissboy
It appears that as of now – none of the cracks work…I have tried everything mentioned in Method Three to no avail…
I have sucessfully implemented the cracks in the past…any idea whats going on?
June 10th, 2006 09:36
Yet more reasons to run Linux.
June 10th, 2006 07:50
FYI…
Friday, June 09, 2006
What’s Genuine About Windows Genuine Advantage?
By Mary Jo Foley
Is Microsoft tracking your daily whereabouts via its anti-piracy technology? Is it collecting information on which non-Microsoft apps you are running? Here’s our attempt to separate fact from urban legend in the Genuine Advantage realm.
After a rash of reports the week of June 4 that Microsoft has been collecting on a daily basis information on users who have opted into the company’s Genuine Advantage anti-piracy program, it seemed like time to separate FUD from fact. Here is Microsoft Watch’s attempt to provide answers to some of the most commonly asked Windows Genuine Advantage questions.
Q: What is Genuine Advantage?
A: WGA is Microsoft’s latest program designed to thwart software piracy. It is designed to check whether consumer and small-business customers are running legitimately licensed copies of Windows XP.
There are two components to Windows Genuine Advantage (WGA): WGA validation and WGA notifications. Validation determines whether the copy of Windows installed is pirated or not. Notifications nag users who Microsoft believes are not running “genuine Windows” and “suggest” where they can “learn more about the benefits of using genuine Windows software.”
Microsoft launched WGA in September 2004. Since then, Microsoft has expanded its WGA pilots around the world. In April 2006, Microsoft announced it plans to apply Genuine Advantage to Office, as well.
Q: Do I have to validate my Microsoft software? Or is it optional to do so?
A:The Validation component of WGA became mandatory in July 2005 for Windows XP users looking to download any kinds of Windows-related updates and fixes. Microsoft is continuing its policy of allowing even those who can’t prove they are running non-pirated copies of Windows to still obtain critical security fixes, however.
Q: When does Genuine Advantage collect data from my PC? What kind of data?
The first time a user runs the WGA validation check, Microsoft’s servers collect the following information:
*Windows XP product key
*PC Manufacturer
*Operating system version
*PC BIOS information
*User locale setting and language
“None of this information is considered personally identifying Information,” according to Microsoft, meaning that a user’s identity cannot be discerned from the information WGA collects automatically.
Q: Microsoft recently acknowledged that its Genuine Advantage servers are pinging users’ PCs on a daily basis. Why was Microsoft doing this?
A: It seems to be the Notifications, not the Validation, component that has been “phoning home” to Microsoft from users’ systems on a daily basis. Microsoft officials claim the daily call home is a “safety check” that it implemented when it first rolled out the Notifications pilot program earlier this year. If Notifications went amok on Microsoft’s side, Microsoft wanted a way to terminate the program quickly, officials said this week. Officials acknowledged they did not communicate Microsoft’s implementation of a daily system check to users until the week of June 4.
Q: What information has Microsoft been seeking/collecting during the daily WGA system check?
A: PCs that have done the initial WGA Validation check do not send information to Microsoft each time they are booted up, according to the Redmond software maker.
However, the WGA Notifications program has been doing a daily check to determine if WGA should run or not. According to Microsoft, however, no identifying system or user information is sent to Microsoft as part of this daily check.
Ballmer: Less Software Piracy = Lower Software Costs
Microsoft Bringing ‘Genuine Advantage’ Authentication to Office
Microsoft Makes ‘Genuine Advantage’ Verification Mandatory
Microsoft Windows Genuine Advantage Exploit Discovered
Microsoft Adds a New Wrinkle to ‘Genuine Advantage’ Initiative
Q: Is Microsoft intending to continue the daily WGA server-side-check process?
A: No. On June 8, Microsoft announced plans to change its WGA system checks: “As a result of customer concerns around performance, we are changing this feature to only check for a new settings file every 14 days. This change will be made in the next release of WGA. Also, this feature will be disabled when WGA Notifications launches worldwide later this year. ”
Q: If users block or disable Genuine Advantage, will Microsoft still ping their machines?
A: No. If someone chooses not to accept the WGA Notifications pilot, it is not installed on their machine and therefore does not do the daily server side check, Microsoft officials said.
Q: Given these facts, is WGA technically spyware?
A: Of course, Microsoft’s answer is no. But spyware is all in the eye of the beholder. If users are not properly notified about exactly what software a vendor installs on their systems and/or about the function and purpose of that software, it sure sounds like spyware to us.
June 10th, 2006 04:16
@Davis: This ist a simple KB905474 unistaller based on batch scripts and not a real WGA workaround because you will be still not able to acces Windows Update or WGA protected download from the Microsoft Download Center (exept you install a patched LegitCheckControl.dll by you self. This is also not a good solution because now Windows Update will try to install KB905474 again.
June 10th, 2006 03:00
Removal of WGA newest version 1.5.532.2
I tryed several methods to remove this latest version without any luck Untill I found this site. I accessed it from google and it should translate to english when you click on this link. Click on the link to download KB905474 uninstaller.exe run the application and a dos window appears. when it is done it will prompt you to restart which it will do automatically.
upon rebooting the dos window comes up again and informs you that the removal was sucessful. Wala no more nag screens…please let me know how it worked…
June 10th, 2006 01:00
[...] I found this interesting article explaining the use of WGA Remover. [...]
June 10th, 2006 00:13
@John: Simply use my update/patch KB905474 v1.5.532.2, posted on page 10, comment #237.
@videografix: This is not a good solution because now Windows Update will offer you KB905474 again.
@Antibody: You don’t need them if you use my Update KB905474.
@Jared: WMP11 has a own WGA-Check in his setup.
1) Entpack wmp11-windowsxp-x86-de-de.exe with WinRAR to a spearate folder
2) Replace the file legitlib.dll in this folder with this patched one: http://rapidshare.de/files/21712706/LegitLib.dll-v1.4.410.0.zip.html
3) Run in this folder the file setup_wm.exe.
June 9th, 2006 22:04
Hey fellas, I found a great way to get rid with the WGA logon blablabla… just use AbsoluteShield File Shredder, delete the WGA files and that’s it!
Best Regards!
Videografix man.
June 9th, 2006 19:32
There are now references on the Internet to a latest version 1.5.532.2 which appeared around 6th June 2006.
Does anyone know anything about that, and how to fix it?
June 9th, 2006 12:52
[...] Windows Genuine Advantage Validation Tool is Shiet I run a valid copy of Windows and I resent the fact that Microsoft feels the need to install software on my machine to “check up” on me. When I first saw the Windows Genuine Advantage Validation Tool in Windows Update, it was easy enough to disable it by unchecking it in the critical updates. The fact that this is listed as a critical update is total BS. It is not critical for me to have this software for my machine to run. Now, Microsoft has decided to force the installation of the Windows Genuine Advantage Validation Tool when you run Windows Update. It seems that hackers have found a way around this in the first 24 hours. Links to follow. This is the sort of shit that really scares/bothers me. With all the different versions of DRM and monitoring and checks and phoning home, this sort of thing is only going to get worse and more invasive. Do whatever you can to get around this. Do you know why they are doing this? It’s because they were tracking the number of people that disabled the update in the old version and found out that everyone was disabling it. Way to go Microsoft, let’s add features that our customers DO NOT WANT! Help to remove this shit here Published Friday, June 09, 2006 12:39 AM by IHateDRMAdmin [...]
June 9th, 2006 11:13
Hey a question for you swissboy. I installed the apatch and it works great. I go to the microsoft site and go to download WMP 11 and you click the thingy and it lets me download. However I go to install WMP 11 beta and it says my copy isn’t valid and directs me to microsoft’s site that says I’m not valid. ANy thoughts?
June 9th, 2006 09:32
Hey! Method 15 working fine! Thank all!
June 9th, 2006 08:30
Thanks swissboy, after running the patch, it’s working fine to me. But I have a question. What do we do with the second link? I did download it but I can’t run it.
June 9th, 2006 04:49
@medianten:
You have to change the key to a not SP2 blacklistet key or you have to reinstall Windows from a CD with already integrated SP2.
… but this ist not the real theme here.
June 9th, 2006 04:27
But what if I need to update to Service Pack 2 on my XP PRO? The hack works(!)(WindowsXP-KB905474-ENU-x86-v1.5.532.0-noWGA.exe), but once the extracted installer is started it does it’s own legitimate-check. Is there any way around this or should I try to get hold of an XP SP2-disc and reinstall the system?