Remove Microsoft’s WGA Deception
Microsoft’s updated WGA Notifications package released on Tuesday was under fire because of the following reasons:
1. Annoying alerts of Windows Piracy Check
2. Pinging of Microsoft Server every system restart
3. To top it all, it was hidden alongside security fixes update that unknowingly made user’s computers into test beds
People did not like the way Microsoft has silently distributed the tools via automatic updates which cloaked itself under security fixes and has told the media the tool installed cannot be removed. This led to programmers finding ways to combat this deceptive software.
Knowing that they cannot stop programmers from rallying tools to forcedly remove this, they have changed their minds and released steps/procedures to remove this tool.
In summary below are the things you need to follow:
Disable WGA Notifications
1. Log on to the computer by using an account that has administrative permissions.
2. Make sure that the WGA Notifications version that exists on the computer is a pilot version. The version format for the pilot version is 1.5.0532.x. In this case, you can uninstall versions 527-532 only. For example, you can uninstall versions that range from 1.5.0527.0 to 1.5.0532.2. To find the WGA Notifications version, follow these steps:
a. Click Start, and then click Control Panel.
b. Double-click Add or uninstall Programs, locate and then click Windows Genuine Advantage Notifications, and then click Click here for support information.
c. In the Support Info dialog box, verify the version number, and then click Close.
3. Rename the following files by changing the extension to .old:
Rename %Windir%system32WgaLogon.dll to %Windir%system32WgaLogon.old Rename %Windir%system32WgaTray.exe to %Windir%system32WgaTray.old4. Restart the computer.
Manually uninstall WGA Notifications
1. Log on to the computer by using an account that has administrative permissions.
2. Make sure that the WGA Notifications version that exists on the computer is a pilot version. The version format for the pilot version is 1.5.0532.x. In this case, you can uninstall versions 527-532 only. For example, you can uninstall versions that range from 1.5.0527.0 to 1.5.0532.2. To find the WGA Notifications version, follow these steps:
a. Click Start, and then click Control Panel.
b. Double-click Add or uninstall Programs, locate and then click Windows Genuine Advantage Notifications, and then click Click here for support information.
c. In the Support Info dialog box, verify the version number, and then click Close.
3. Rename the following files by changing the extension to .old:
Rename %Windir%system32WgaLogon.dll to %Windir%system32WgaLogon.old Rename %Windir%system32WgaTray.exe to %Windir%system32WgaTray.old4. Restart the computer.
5. Unregister LegitCheckControl.dll by using Regsvr32. To do this, follow these steps:a. Click Start, click Run, type cmd, and then click OK.
b. At the command prompt, type the following, and then press ENTER: Regsvr32 %Windir%system32LegitCheckControl.dll /u
6. Restart the computer.
7. Click Start, click Run, type cmd, and then click OK.
8. At the command prompt, delete the following files by typing the Del command. Press ENTER after you type each command.
Del %Windir%system32wgalogon.dll Del %Windir%system32WgaTray.exe Del %Windir%system32LegitCheckControl.dll9. At the command prompt, type regedit.
10. Locate and then right-click the following registry subkeys. Click Delete after you locate each subkey. HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNT CurrentVersionWinlogonNotifyWgaLogon
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNT CurrentVersionWinlogonNotifyWgaLogon
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows CurrentVersionremoveremoveWgaNotify
11. Restart the computer.
Story found via news.
[tags]Microsoft, WGA Notification, Security Fixes, Windows[/tags]












