How to remove windows xp authentication notification. Check Windows license from XP to Windows10. The Windows Authentication result notification appears to the user multiple times

WgaTray.exe, 329 KB in size, which actually launches the notification itself and the WgaLogon.dll file, 231 KB in size.

How to clear the authentication message in Windows XP.

Let's launch the registry editor, this is - (Start - Run WIN + R - regedit - Enter)

Next we find the registry section
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Notify\WgaLogon
After this, delete the entire WgaLogon section (those in doubt can first make a copy of this section)
We reboot the system
After rebooting, the authentication message will disappear.

How to clear the authentication message in Windows 7

As for Windows 7, we remove it using the RemoveWAT21 program.
Download this program (you can search for it on the Internet)
Remove old activation
Reactivate and remove authentication forever
Detailed instructions are described in the program itself; the entire operation takes place in literally three clicks.

How to authenticate Windows 7, XP

What needs to be done to remove the annoying notification? Based on the above, the answer suggests itself - delete or rename the files responsible for the notification. Also, when installing the KB905474 update, the system created copies in the cache, which are located at the following address:

WINDOWS\system32\DllCache\ (WgaLogon.dll, WgaTray.exe)

which can also be deleted.
You can also solve the problem with the notification by making some changes in the Windows registry. The key responsible for the operation
notices, located in the register at the address

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\

CurrentVersion\Winlogon\Notify\WgaLogon.

We go to the registry, through Start → run, type the regedit command and, having penetrated the branch to the WgaLogon key, delete it.

When working with the registry, you need to be extremely careful not to make irreparable mistakes. For those who have no experience or are simply wary of these manipulations, the Autoruns program will come to the rescue, which gives access to the registry and all processes running in it. Launch Autoruns, go to the Winlogon tab, uncheck the box next to the WgaLogon key, close the program and reboot. In the presented case, this key is not available, because Fortunately, the system is not affected by this muck. Also, by clicking on the Everything tab, you can access all processes running in the system, cleaning it from malware and banners.

Option with hosts

Find the hosts file located at:

\Windows\system32\drivers\etc\hosts

open it using notepad and enter the following line at the bottom:

127.0.0.1 mpa.one.microsoft.com

Then, having opened access to hidden folders, delete the following file Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data\data.dat.
After that, by going to Windows Update, you can update without any problems.
After completing the operations, you need to restart the computer.
That's it, now your Windows functions like new.

In fact, the program assumes that your system is licensed, but for some reason you failed verification. This is exactly the unfortunate incident that happened to my friend. The task was set to remove the message from the screen and also return the picture to the desktop. It was this incident that helped me write this article, because those who bought the operating system legally do not have to suffer from such misunderstandings:

In fact, the problem is solved more than simply. Our main and only tool will be the Autoruns program, familiar from the article “how to remove a virus from a flash drive” . You can download the Autoruns program from our website.

Uncheck the box next to this program and restart the computer. As we can see, the problem was solved simply and effectively.
Finally, I would like to say a few banal words. Dear friends, despite all of the above, I highly recommend installing a licensed operating system on your computer and highly discourage installing all kinds of Windows builds “From the Beast” and other “home-grown” system manufacturers.

OTHER WAYS TO SOLVE THE PROBLEM

After the update called "KB905474 (Windows Genuine Advantage Notification)", in the lower right corner of the screen, you will see a beautiful sign

“You may have purchased a counterfeit copy of the software. This copy of Windows has not been authenticated."

Two files are responsible for this sign:

C:\WINDOWS\system32\ WgaTray.exe

C:\WINDOWS\system32\ WgaLogon.dll

WgaTray.exe constantly “hangs” in memory, and if you turn it off after Task Manager, it starts again.

There are several ways to solve this problem.

let's start with registry

To remove the sign, you just need to edit the Windows registry.

Attention! Be careful when manipulating the Registry!!!

Let's go to Start > Execute>a window appears with the title " Starting the program"we write in it regedit and click OK.

The Registry Editor opens, search in it and delete WgaLogon. To get to the desired section you need to go:

HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows NT > CurrentVersion > Winlogon > Notify > WgaLogon(delete).

Actually that's all!

If you have difficulty manually editing the Registry

Download and unzip the file. Run the wga.reg file. The Registry Editor dialog box will appear “Are you sure you want to add the information from wga.reg to the registry?” – click Yes. The Registry Editor dialog box will appear with a message that the data from the wga.reg file has been successfully added to the registry - click OK.

After rebooting the operating system, the message about the detected unlicensed version of Windows will not bother you!

For those who didn’t find this helpful, you can use the utilities AntiWGA 3.0, WGAOGA_Kill. Look for download links in Yandex and Google.

http://www.filecluster.com/downloads/RemoveWGA.html - another link

You perform all actions with the Windows registry at your own peril and risk.

If, among other updates from Uncle Bill’s website, you were “lucky enough” to download and install the KB905474 (Windows Genuine Advantage Notification) update, from now on every time you boot the operating system you can “admire” (of course, if you are using a not entirely licensed OS, or rather , completely unlicensed) – in the lower right corner of the screen – with a beautiful sign “You may have purchased a counterfeit copy of the software. This copy of Windows has not been authenticated."

To continue starting the OS, in the dialog box “This copy of Windows has not been authenticated and the problem is not resolved. This copy of Windows is not eligible to receive the full range of updates and support from Microsoft. To protect your copy of Windows, click the “Allow" button; you need to click the Allow button (and so on - every time!). Well, have you updated?! Here are the consequences of thoughtlessly downloading and installing updates!

But all is not lost, you can return, so to speak, the “former virginity” of your Windows (at the same time avoid Microsoft’s liability). For displaying (activating) this miracle sign with a notification that Windows failed authentication - two files respond: WgaTray.exe (329 KB) and WgaLogon.dll (231 KB). Both are located in the "heart" WindowsXP – C:\WINDOWS\system32\ WgaTray.exe constantly “hangs” in memory, and if you turn it off after Task Manager, it starts again.

There are several methods to solve this problem (including renaming/deleting WgaTray.exe And WgaLogon.dll, as well as installing all kinds of patches), but the simplest – this is slightly edited Windows Registry.

To do this, you need to launch the Registry Editor: Start – Execute... – Starting the program – regedit – OK. The Registry Editor will launch, in which you need to find and delete the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon

Attention! Be careful when manipulating the Registry!

If you have difficulty manually editing the Registry (or you simply have no time/too lazy to deal with it), download and unzip the wga.rar file, single-click (or double-click, depending on your operating system settings) on the wga.reg file. The Registry Editor dialog box appears, “Are you sure you want to add the information from wga.reg to the registry?” – click Yes. The Registry Editor dialog box will appear with a message that the data from the wga.reg file has been successfully added to the registry - click OK.

After rebooting the operating system, the message about the detected unlicensed version of Windows - may it no longer disturb your clear conscience, untainted by piracy!

Note

When you install the Windows XP Genuine Advantage Notification update, the following files are copied to your local computer:

– Windows XP Genuine Advantage Validation – C:\WINDOWS\system32\LegitCheckControl.dll (1,41 MB);

– Authentication Result Notification Windows - C:\WINDOWS\system32\WgaLogon.dll(231 KB);

– Windows Authentication Notifications – C:\WINDOWS\system32\WgaTray.exe(329 KB).

At the same time in the system cache DLL copies of the files are created:

– C:\WINDOWS\system32\DllCache\WgaLogon

– C:\WINDOWS\system32\DllCache\WgaTray

Although the above editing of the Registry is quite enough to eliminate the message about the copy being fake (both in SP3 and SP2), after rebooting PC It's better to delete these files too.
It would also be preferable to disable the update about KB905474 (Ponel Start, about an hour - a yellow icon.

If something doesn’t work out for you, you can use this algorithm of actions:

1. Start -> Search (Start -> Search)
2. Select all files and folders
3. In More Advanced Options, select Search hidden files and folders
4. Search for "WGA" (without quotes)
5. When found: rename WgaTray to WgaTray_ and kill WGANotify
6. CTRL + ALT + DEL find wgatray.exe and end this process
7. Find WGATray.Settings in the search results and open with notepad
8. COMPLETELY rewrite the content like this: Balloon interval = 9999999999 daysDaysBeforeBuyNow Unactivated = 9999999999 DaysBeforeBuyNow Nongenuine = 9999999999 Disabled = true Reduced reminders = true
9. Save and close
10. Reboot
11. There are no more reminders in the tray. A warning remains in the loading window
12. Open the registry editor Start -> Search (Start -> Run) enter regedit
13. Go to the registry hive HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WgaNotify
14. We kill two keys that begin: NoRemove
15. Control Panel -> Add or Remove Programs. Check the box “Show updates”
16. Windows Genuine Advantage Notifications (KB905474) Click “Delete”
17. Gone. Close the windows with “Control Panel” and “Add or Remove Programs”
18. We return to the registry and completely delete the WgaNotify folder: click on the left side and press DEL
19. Go to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WgaNotify bush, click on WgaNotify on the left side and press DEL
20. Go to the HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\System\WgaNotify hive, click on WgaNotify on the left side and press DEL
21. Go to the HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\System\WgaNotify hive, click on WgaNotify on the left side and press DEL
22. Go to the hive HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon - select WgaLogon on the left side and press DEL
23. We reboot - nothing. Loading up - there is no timer!
24. THE MOST IMPORTANT! WGA will want to download and re-install itself. Therefore, the next time you update, uncheck this update and select the option “Do not display this update!!!

When updating through the built-in Microsoft Update option, you will see in the first rows an inscription that you have prohibited the installation of IMPORTANT updates and will be asked to return and install them again.
THERE IS NOTHING CRITICAL EXCEPT KB905474 THERE! Any updates can be manually downloaded from the MS download center.
And the most interesting thing: even corporate keys banned by MS are validated for downloading updates!

On the screens of those computers that use an unactivated version of Windows 7 or the activation failed after the update, the following message is displayed: "Your copy of Windows is not genuine" or a message of similar meaning. Let's figure out how to remove the annoying notification from the screen, that is, disable authentication.

There are two options for disabling authentication in Windows 7. Which one to use depends on the user's personal preferences.

Method 1: Editing the Security Policy

One of the options for solving this problem is to edit the security policy.

1. Click "Start" and go to "Control Panel".



2. Open section "System and Security".



3. Follow the inscription "Administration".



4. A list of tools will open in which you should find and select "Local politics...".



5. The Security Policy Editor will open. Right click ( RMB) by folder name "Restricted Use Policy..." and from the context menu select "Create a policy...".



6. After this, a number of new objects will appear on the right side of the window. Go to the directory "Additional Rules".



7. Click RMB on an empty space in the directory that opens and select the option from the context menu “Create a hash rule...”.



8. The rule creation window opens. Click the button "Review…".



9. A standard file opening window opens. In it you need to go to the following address:

   C:\Windows\System32\Wat

   In the directory that opens, select the file called "WatAdminSvc.exe" and press "Open".



10. After completing these steps, you will be returned to the rule creation window. In his field "File Information" The name of the selected object will be displayed. From the dropdown list "Security level" select value "Forbidden", and then press "Apply" And "OK".



11. The created object will appear in the directory "Additional Rules" V "Security Policy Editor". To create the next rule, click again RMB on an empty space in the window and select “Create a hash rule...”.



12. Again in the rule creation window that opens, click "Review…".



13. Go to the same folder called "Wat" at the address given above. This time select the file with the name "WatUX.exe" and press "Open".



14. Again, when returning to the rule creation window, the name of the selected file will be displayed in the corresponding area. Again, select the element from the security level selection drop-down list "Forbidden", and then press "Apply" And "OK".



15. The second rule has been created, which means that OS authentication will be disabled.

Method 2: Deleting files

The problem posed in this article can also be solved by deleting some system files responsible for the verification procedure. But before that, you should temporarily disable the standard antivirus, "Windows Firewall", remove one of the updates and deactivate a certain service, since otherwise problems may occur when deleting the specified OS objects.

1. After you have deactivated your antivirus and "Windows Firewall", go to the section already familiar from the previous method "System and Security" V "Control Panels". This time open the section "Update Center".



2. A window opens "Update Center". Click on the inscription on the left side of it "Viewing the log...".



3. In the window that opens, click on the inscription to go to the update removal tool "Installed updates".



4. A list of all updates installed on your computer will open. You need to find an element in it KB971033. To make your search easier, click on the column title "Name". This will list all updates in alphabetical order. Search in a group "Microsoft Windows".



5. Having found the desired update, select it and click on the inscription "Delete".



6. A dialog box will open where you need to confirm the removal of the update by clicking on the button "Yes".



7. After the update is removed, you need to disable the service "Software Protection". To do this, go to the section "Administration" V "Control Panels", which has already been discussed when considering Method 1. Open element "Services".



8. Starts "Service Manager". Here, just as when deleting updates, you can arrange the list items in alphabetical order for ease of finding the desired object by clicking on the column name "Name". Having found the name , select it and click "Stop" on the left side of the window.



9. The service responsible for software protection will be stopped.



10. Now you can proceed directly to deleting files. Open "Conductor" and go to the following address:

    C:\Windows\System32

    If the display of hidden and system files is disabled, then you must first enable it, otherwise you simply will not find the necessary objects.

    

11. In the directory that opens, find two files with a very long name. Their names begin with "7B296FB0". There won't be any more objects like this, so you can't go wrong. Click on one of them RMB and select "Delete".



12. After the file is deleted, do the same procedure with the second object.



13. Then return to "Service Manager", select the object "Software Protection" and press "Run" on the left side of the window.



14. The service will be activated.



15. Next, do not forget to enable the previously deactivated antivirus and "Windows Firewall".

As you can see, if your system activation has failed, then it is possible to disable the annoying Windows message by deactivating authentication. This can be done by setting a security policy or by deleting some system files. If necessary, everyone can choose the most convenient option for themselves.

What to do if you see the following message: this copy of Windows is not authenticated, (also called the black screen of death). Of course, those who have a licensed version of the OS do not have to worry. It is not at all necessary to completely remove the operating system; it is enough to follow the advice. There is always a way out and we will activate (revive) the OS again, be it Windows XP or Windows 7.

In fact, all this is done by a small utility that poses virtually no danger, but only prevents images from running on the desktop screen - it assumes that your system is unlicensed and tries to tell you about it. In this case, a couple of files are registered in the system in the WINDOWS\system32\ folder directory:

• WgaTray.exe, 329 KB in size, which actually triggers the notification itself


• and the file WgaLogon.dll, 231 KB in size.

Remember one thing! After installing any non-licensed Windows, do not update the system, but uncheck the “update” box and there will be no problems.

But if it appeared on the desktop " black screen", with the inscription:

• You may have purchased a counterfeit copy of the software


• This copy of Windows has not been authenticated

Moreover, this message constantly appears every time the system boots.

Well, let's try to return everything to normal. To do this, we will be interested in the section in the Windows registry:

CurrentVersion\Winlogon\Notify\WgaLogon

How to clear the authentication message in Windows XP.

1. Let's launch the registry editor, this is - (Start - Run - regedit - Enter)


2. Next we find the registry section

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon



3. After this, delete the entire WgaLogon section (those in doubt can first make a copy of this section)


4. We reboot the system

After rebooting, the authentication message will disappear.

How to clear the authentication message in Windows 7

As for Windows 7, we remove it using the program RemoveWAT21 .

1. Download this program (you can search for it on the Internet)


2. Remove old activation


3. Activate again


4. And remove authentication forever

Detailed instructions are described in the program itself; the entire operation takes place in literally three clicks.

How to authenticate Windows 7, XP

What needs to be done to remove the annoying notification? Based on the above, the answer suggests itself - delete or rename the files responsible for the notification. Also when installing an update KB905474, the system has created copies in the cache, which are located at the following address:

WINDOWS\system32\DllCache\ (WgaLogon.dll, WgaTray.exe)

which can also be deleted.

You can also solve the problem with the notification by making some changes in the Windows registry. The key responsible for the operation

Notices are located in the register at

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\Winlogon\Notify\WgaLogon.

We go to the registry via Start → run, dial the command regedit and, penetrating along the branch to the key

WgaLogon, delete it.

When working with the registry, you need to be extremely careful not to make irreparable mistakes. For those who have no experience or are simply afraid of these manipulations, the program will come to the rescue Autoruns, which gives access to the registry and all processes running in it. Let's launch Autoruns, go to the tab Winlogon, uncheck the box next to the key WgaLogon, close the program and reboot. In the presented case, this key is not available, because Fortunately, the system is not affected by this muck. Also, by clicking on the tab Everything, you can gain access to all processes running in the system by cleaning

From malware and banners.