remove window non-genuine error

[mirza matloob]

If you have only just installed Windows Genuine Advantage notifications, simply using the system restore function will remove the program. Then refuse to accept the WGA update next time Windows updates. Otherwise, proceed as detailed below. (NOTE: If you try these steps while you are in "Safe Mode," step #8 is unnecessary).
2
First, try the following:
3
Open a CMD Line Window by Clicking on Start ==>Run ==> type CMD and Press OK.
4
Change Directory into the System32 Folder (Like Cd c:\Windows\System32)
5
Open a notepad Window and type the following lines:
taskkill -IM wgatray.exe
del wgatray.exe
del wgalogon.dll
6
Highlight and copy to the Clipboard the three lines above
7
Paste the contents of the Clipboard to the CMD Window
8
This should kill the wgatray.exe Process from the Taskbar and immediately delete both files wgatray.exe and wgalogon.dll without the need to to go through all steps bellow.
9
If that does not work, then continue and follow the steps below;
10
Open System32 by either A or B of the following methods:


a) Click "Start", "Run", then type-in "System32". Click "Okay".
b) Find System32 manually by clicking "Start" > "My Computer" > "(X" (Replacing "X" with the drive letter of the host of Windows) > "Windows" > "System32".

11
In "System32", go to "Tools" > "Folder options" > click on the tab, "View" > Uncheck "Hide extensions for known file types". Now you can begin...
12
Check to make sure the window that comes up has a full screen of various files. The files are in alphabetical order, which makes it easier to locate the specific file.
13

Find "WgaLogon.dll" and rename it "WgaLogon.dll.bak".
14
Create an empty copy of WgaLogon.dll:


Right click on a blank space in System32 and select "New" > "Text Document".
Leave the text document empty and label it "WgaLogon.dll". Press Enter (on your keyboard).

You may get a warning from the above step that says, "If you change a file name extension, the file may become unusable. Are you sure you want to change it?". Click "Yes" on this warning.
15
Be ready to complete the next two steps very quickly! Find "WgaTray.exe" in "System32" and delete it. You will then have 5 seconds to find "WgaTray.exe" in the Task Manager (the next step). NOTE: If you remove the files mentioned above while you are in "Safe Mode," step #8 is unnecessary.
16

Immediately open Task Manager. You can do this by pressing the Ctrl, Shift, and Esc keys simultaneously, pressing the Ctrl, Alt, and Delete keys simultaneously, or right clicking the Taskbar and selecting "Task Manager". Click on the process tab and click end process when "WgaTray.exe" is selected. Note: If you take longer, do not panic! All that will happen is that "WgaTray.exe" will keep reappearing in the processes list (i.e. you won't be able to delete it as required). To remove the notifications after this, return to system32. You will find two files:"WgaLogon.dll.bak" (the one you renamed) and an Application Extension (0KB) called "WgaLogon.dll". Delete the Application Extension, rename "WgaLogon.dll.bak" to "WgaLogon.dll" and repeat the steps from the fifth one onwards (at a greater speed!!).
17
Restart your computer once you have finished. All the notification messages should be gone.

[znk_dunjar]

nice

[thanksgod]

Mirza Bhai,

Thanks for sharing this info. No doubt its a professional approach.
I appreciate your concern and time given to write all this.

May I share to you and other reader of ITD, a simpler way to delete it.

-In the search window, just write WGA
- Place to search, select my computer

then start your search.
The search will return you any file with the name of WGA.

-Just delete all of them. the problem is finished.

Note: the file by the name (NeWGAamefiles) will also be returned so you can leave them without deleting.

Best Regards

[born2rule]

nyc i check it

[mirza matloob]

Passand karny ka shukria

[friend4allage]

how to delete in windows 7, as i have not finding wga file in c: drive

[qaiserjanu]

nice sharing.

[mirza matloob]

how to delete in windows 7, as i have not finding wga file in c: drive

Genuine and activated Windows 7 may sometimes been detected as “pirated”, illegal, rogue or not genuine, despite the operating system has been fully paid for, or has been able to used and fully activated all the while. The symptom is that immediately after log on, the following Windows Activation window will be displayed:

Windows is not genuine
Your computer might not be running a counterfeit copy of Windows.
0×80070005


In addition, the computer desktop background is turned to black, and the following error message is shown on the bottom right corner of the screen:

This copy of Windows is not genuine

When user view the system information in System Properties (accessible via Control Panel -> System and Security -> System), the following error message will be visible too:

You must activate today. Activate Windows now

Using slmgr.vbs /dlv or slmgr.vbs /dli in an elevated command prompt with administrator privileges to view the licensing status will return the following message instead:

Error: 0×80070005 Access denied: the requested action requires elevated privileges

Normally, the suddenly or random deactivation of an activated Windows 7 on genuine platform can be resolved by simply restarting the computer, so that Windows 7 can re-access the activation status to return the computer to activated status. However, in some cases, where modification has been done to HKU\S-1-5-20 registry key causing the Network Service account to lose and missing full control and read permissions over the registry key, the losing of activated status may happen on Windows 7 too.

Microsoft explains in KB2008385 that the possible cause for the Windows 7 turned pirated error is likely the result of applying a Plug and Play Group Policy object (GPO):

Computer Configuration -> Policies -> Windows Settings -> Security Settings -> System Services -> Plug and Play (Startup Mode: Automatic)

The Windows 7 Licensing service uses Plug and Play to obtain hardware ID information and binds the license to the computer, thus change to the setting can result in an activated system appearing to be out of tolerance. The default permissions of the Plug and Play policy do not grant the Licensing service, which runs under the Network Service account, the appropriate rights to access the Plug and Play service. To fix and resolve the Windows 7 activation lost issue, and make the Windows 7 activated and genuine again, just follow one of the two workarounds below:

Method A: Disable the Plug and Play Policy
Determine the source of the policy. To do this, follow these steps:
On the client computer experiencing the activation error, run the Resultant Set of Policy wizard by clicking Start -> Run (or press Win+R keys), and entering rsop.msc as the command.
Visit the following location:

Computer Configuration -> Policies -> Windows Settings -> Security Settings -> System Services

If the Plug and Play service is configured through a Group Policy setting, you see it here with settings other than Not Defined. Additionally, you can see which Group Policy is applying this setting.
Disable the Group Policy settings and force the Group Policy to be reapplied.
Edit the Group Policy that is identified in Step 1 and change the setting to “Not Defined.” Or, follow the section below to add the required permissions for the Network Service account.
Force the Group Policy setting to reapply: gpupdate /force (a restart of the client is sometimes required).

Method B: Edit the permissions of the Group Policy
Open the Group Policy that is identified in Method A, Step 1 above, and open the corresponding Group Policy setting.
Click the Edit Security button, and then click the Advanced button.
In the Advanced Security Settings for Plug and Play window click Add and then add the SERVICE account. Then, click OK.
Select the following permissions in the Allow section and then click OK:

Query template
Query status
Enumerate dependents
Interrogate
User-defined control
Read permissions
Run gpupdate /force after applying the permissions to the Group Policy setting.
Verify that the appropriate permissions are applied with the following command:

sc sdshow plugplay
The following are the rights applied to the Plug and Play service in SDDL:

DA;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)
(A;;CCLCSWLOCRRC;;;IU)
(A;;CCLCSWLOCRRC;;;SU)
SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

Note: (A;;CC LC SW LO CR RC ;;;SU is an Access Control Entry (ACE) that allows the following rights to “SU” (SDDL_SERVICE – Service logon user):

A: Access Allowed
CC: Create Child
LC: List Children
SW: Self Write
LO: List Object
CR: Control Access
RC: Read Control
SU: Service Logon User

If there are no GPO’s in place, then another activity may have changed the default registry permissions. To work around this issue, perform the following steps:
On the computer that is out of tolerance, start Registry Editor.
Right-click the registry key HKEY_USERS\S-1-5-20, and select Permissions… button.
If the NETWORK SERVICE is not present, click Add… button.
In Enter the object names to select type Network Service and then click Check Names and OK.
Select the NETWORK SERVICE and Grant Full Control and Read permissions.
Restart the computer.
After the restart, the system may require activation. Complete the activation.

[friend4allage]

dear what should i do to solve the problem. I have this message:

Windows is not genuine
Your computer might not be running a counterfeit copy of Windows.
0×80070005

Second message is attached.

[mirza matloob]

dear what should i do to solve the problem. I have this message:

Windows is not genuine
Your computer might not be running a counterfeit copy of Windows.
0×80070005

Second message is attached.

Aslam o alaikum
Bro mery pass window ko genuine banany ki trick tu lekin according to rule mein yehan share nahien kar sakta

[PASHA595]

thanks it works.
i hv deleted WGA through method B.
very thanks to it ki duniya.

[MAB1]

very nice sharing thx a lot for sharing with ITD