Login
 
Email RSS Feed Twitter Facebook Flickr YouTube

How To: Disabling Windows Genuine Advantage (wgatray.exe)

How To: Disabling Windows Genuine Advantage (wgatray.exe)

Recently, one of my clients, bought 5 refurbished Dell desktops, direct from Dell. After installing their software (medical programs, its a doctors office) , and completing a reboot, I watched as every single one of the 5 systems popped up a warning with something along the lines of , ” You may be a victim of software piracy “. Well I know that part of the refurbishing process involves reinstalling a new copy of windows…so I couldn’t logically understand why the software would trigger the cd-key to now register as a non valid copy.I called Dell and once I got on the phone with a rep, I asked how this could be possible. We tried a few different methods to get it to stop, but even re-validating the key proved un-responsive. After about an hour, I figured I would just end the call on a friendly note and figure a seperate way around it.

First off, its easy to see that the process is the ‘wgatray.exe’ process. Annoying as shit, is the fact that if you end the task, it atuomatically re-appears over and over. After attempting to remove all known files from registry named ‘wgatray.exe’, I figured a reboot would finalize the removal, but lo and behold it reappears after a reboot. I assume there must be another location, or a tagfile associate with it, re-creating the wgatray.exe and slapping it back into system32 .

A quick google search later, I find that there are several locations and several files, as well as to start in safe mode in order to properly remove the warning. So heres the “how to” :

You can try this, I didn’t use this, but it basically tags the registry to a “0″ so that it just can’t enable to check for genuine windows, but personally I’d rather remove it completely. Download here

Ive read other methods, and it didn’t make to much sense, majority of them say to open task manager and disable wgatray.exe, then restart, problem is, it instantly re-appears, before you could even hit “restart”. Not only that, but restarting then entering safe mode, it wouldn’t have mattered if you disabled wgatray.exe before restarting or not, since it isnt going to load anything in safe mode that isn’t absolutely needed to run the system. Here is the easiest method:

1. Restart your computer, hit F8 before windows loading screen to go into the safe mode menu.

2. Select Safe mode (not with networking, and not with command prompt)

3. Once your in windows, goto START>RUN> type “regedit” (without the qoutation marks) and hit ENTER.

4. Goto EDIT, select FIND

5. Search for wgatray.exe, delete any reference found, (after it finds it the initial first time, just hit F3 to continue the search. Continue to delete anything it stops on.

6. Scroll all the way back up inthe registry editor, and select My Computer (one click. not two) and start a new FIND, this time were looking for Wgalogon, again, delete any references found.

7. Lastly, again, click on My computer, and start a new FIND, searching for LegitCheckControl.dll , again delete any references found.

8. Reboot and your finished, if not, you may have missed a registry entry.

BTW you should be able to continue to download Windows update (when set to automatically download an install).

This is for informative purposes only.

***UPDATE***

Here’s the latest update, as of May 23rd 2009, You need to do a broader search in regedit now, no you can’t mess anything up unless your a complete moron, Its safe to delete any of the files, just do a search after you performed the previous search listed above in regedit. Search for WGA, and delete any keys or folders with it. This should fix any of the last remaining people in XP that are still having a problem removing it.   Please check my post on Vista (any version) crack, and OEM registered change, 100% validation check, I have recently updated that as well.

***UPDATE***

I also have ALL Versions of WINDOWS VISTA x86 x64, WINDOWS 7 x86 x64, Windows XP, Windows genuine bypass, and cracks, They are all located here in the blog

VN:F [1.9.22_1171]
Rating: +2 (from 2 votes)

83 Comments

Leave A Reply
  1. Ran says
    July 27, 2013, 8:46 am

    Thanks a lot – it worked (XP) after all other solutions offered on the web failed.

    VA:F [1.9.22_1171]
    Rating: 5.0/5 (1 vote cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  2. Samson says
    April 22, 2012, 5:23 pm

    Thanks a lot bro…
    This works and it worth try!

    VA:F [1.9.22_1171]
    Rating: 5.0/5 (1 vote cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  3. Carli says
    January 16, 2012, 2:45 pm

    Intelligence and simplicity – easy to undresntad how you think.

    VA:F [1.9.22_1171]
    Rating: 5.0/5 (1 vote cast)
    VA:F [1.9.22_1171]
    Rating: +1 (from 1 vote)
    Reply
    • Exempt says
      January 16, 2012, 7:03 pm

      Thanks Carly :)

      VN:F [1.9.22_1171]
      Rating: 3.0/5 (1 vote cast)
      VN:F [1.9.22_1171]
      Rating: 0 (from 0 votes)
      Reply
      • lithia morgan says
        January 19, 2012, 10:23 am

        Is this still working?

        VA:F [1.9.22_1171]
        Rating: 1.0/5 (1 vote cast)
        VA:F [1.9.22_1171]
        Rating: 0 (from 0 votes)
        Reply
        • Exempt says
          January 19, 2012, 11:18 am

          It is still working, and when windows 8 comes I will update it :)

          VN:F [1.9.22_1171]
          Rating: 0.0/5 (0 votes cast)
          VN:F [1.9.22_1171]
          Rating: 0 (from 0 votes)
          Reply
  4. idd says
    June 17, 2011, 11:28 pm

    Back to the original problem, you saw the message because the refurbish-er used a pirated copy and not a Dell Restore Cd. If they had used a Dell Restore CD you never would have had any issue.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
    • davidleach09 says
      June 20, 2011, 8:45 pm

      That’s incorrect, there were many known problems with WGA incorrectly identifying legitimate copies of windows as illegitimate, Microsoft went as far as to create a web portal to reissue keys to wrongly identified businesses and individuals.

      VN:F [1.9.22_1171]
      Rating: 0.0/5 (0 votes cast)
      VN:F [1.9.22_1171]
      Rating: 0 (from 0 votes)
      Reply
  5. Tim says
    April 26, 2011, 7:01 pm

    Could microsoft catch on to this and include registry fixes in future SP updates?

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
    • David says
      April 26, 2011, 7:56 pm

      It’s not that they haven’t caught on, they are very aware of these workarounds. Microsoft accepts it as a loss, and it is very unlikely that they would put out a “Blackout” on cracked/hacked older products.

      VA:F [1.9.22_1171]
      Rating: 0.0/5 (0 votes cast)
      VA:F [1.9.22_1171]
      Rating: 0 (from 0 votes)
      Reply
  6. February 23, 2011, 5:38 am

    [...] Sure there may always be a small intrusive little star that pops up and reminds you that your copy is in fact not genuine, but there are always people like me out there that create ways for you to remove them. [...]

    Reply
  7. Prashanth says
    January 11, 2011, 4:48 pm

    Thanks a ton! Solved my prob right away!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  8. vk says
    December 1, 2010, 2:45 am

    Thnks for the info. Stayin one step ahead. Your a mstr.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  9. nakedrobz says
    November 15, 2010, 3:38 pm

    you are a legend.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  10. max says
    November 10, 2010, 7:23 pm

    thanks alot but it didnt work
    it says that my antivirus protected that wgatray
    isnt that weird it is killing my computer cpu (100% cpu usage)i knew that from the task manager
    it turns off my computer suddenly under the action cpu overheating i’ve downloaded something called speedfan (it detects the temp of my cpu ) its over 128c
    i need a help here

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
    • David says
      November 10, 2010, 8:27 pm

      Antivirus will always try to block it, disable and retry, also your CPU is waaaay to hot, but some system specs would greatly help, what kinda of CPU , operating system?

      VA:F [1.9.22_1171]
      Rating: 0.0/5 (0 votes cast)
      VA:F [1.9.22_1171]
      Rating: 0 (from 0 votes)
      Reply
  11. Gina says
    July 9, 2010, 3:29 pm

    I tried everything- ran it in safemode- went through regedit. When I found wgatray (and there was only one find on it) I tried to delete that folder and got an error message saying I couldn’t delete it. I couldn’t drag it to the recycle bin. When I tried to look for it again I couldn’t find anything related to wgatray. I couldn’t find anything for wgalogon or legitcheckcontrol. I’ve tried looking in the System 32 folder for the wgatray.exe file and it is not there. I tried searching the whole computer for wgatray and winlogon and it doesn’t exist. I’ve unhid every folder and file…. I am losing my frickin’ mind with this pain in the d*ck!~….Any suggestions? I’m running Windows 7 Ultimate.

    VA:F [1.9.22_1171]
    Rating: 5.0/5 (1 vote cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
    • David says
      July 9, 2010, 7:30 pm

      Yes I can help, Windows 7 (All versions) have a new updated pain in the ass app called Microsoft WAT, “Windows Activation (or Authentication) Technologies”. I have another post on how to remove WAT, it’s extremely simple. Click HERE

      VA:F [1.9.22_1171]
      Rating: 5.0/5 (1 vote cast)
      VA:F [1.9.22_1171]
      Rating: 0 (from 0 votes)
      Reply
  12. J says
    June 30, 2010, 12:02 pm

    I found a way to disable wgatray.exe

    Go to Safemode
    Go to c:windowssystem32
    Delete wgatray.exe
    Create a text file call wgatray.exe — Set to read only.
    Reboot
    Wgatray.exe won’t show up anymore as a process.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  13. Moncho says
    April 10, 2010, 7:39 am

    Hi,

    How To: Disabling Windows Genuine Advantage (wgatray.exe) in windows 7? I can’t find wgatray.exe, must be anothe *.exe right?

    Thank you very much

    moncho

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  14. doobryfirkin says
    January 21, 2010, 2:37 pm

    works for me thanks

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  15. littlebear says
    January 16, 2010, 8:09 pm

    :P, I give up on windows with so many virus targeted at them, so now I’m with linux with less capabilities but much cleaner lol

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  16. neil says
    December 6, 2009, 1:45 am

    hey when i got to step 5 (find wgatray.exe) ive do it den it finished finding nothing !
    i didnt locate the wgatray.exe what must i do?

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  17. Dave Parke says
    November 10, 2009, 5:58 pm

    WORKED LIKE A CHARM …SO FAR…. I DON’T TRUST THIS MAGIC BOX
    THANKS SO MUCH IT WAS VERY EASY AND YOUR INSTRUCTIONS WERE GREAT
    DAVE

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  18. WTF says
    November 9, 2009, 1:46 am

    My computer keeps shutting down by itself whenever I try to search wgatray.exe or wgalogon in safe mode. So I went in normally and I started to type in WGA in the Find box on regedit and there are so many files and folders to delete! I think I’m going to fuck up my computer if I keep doing this… Please respond ASAP!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
    • David says
      November 9, 2009, 3:34 am

      Waiting for you bud, check your email!

      VA:F [1.9.22_1171]
      Rating: 0.0/5 (0 votes cast)
      VA:F [1.9.22_1171]
      Rating: 0 (from 0 votes)
      Reply
  19. Andvari78 says
    October 2, 2009, 5:33 pm

    The annoying little bastard happened to me today. I was so furious I considered throwing my laptop out of the window.
    But I found your guide and followed your instructions.
    So, thank you very much. Words can’t express my gratitude.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  20. Ben says
    September 15, 2009, 8:10 pm

    This is an essential guide for any computer user. Thanks David!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  21. John says
    August 27, 2009, 12:41 am

    Hey buddy this did not work for me, when I did Find for all three items it did not find any of them?

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  22. ozmose says
    August 13, 2009, 1:52 am

    thanks for the very easy to follow instructions I know nothing about computers and you walked me right through it ” only a moron could screw this up”that was good mines gone the WGA.I had to run through these steps three times before I found all related files thanks man.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  23. mikeeee says
    August 9, 2009, 6:46 am

    Didn’t work for me and my “search” in the drop down menu for searching “C” or other dives or folders/files on them doesn’t work since wgatray has showed up.
    Thanks for all your good guidance, it seems to have worked for many.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  24. wAfFlE hOuSe says
    August 3, 2009, 7:27 am

    that wga is a stubborn whore …can’t get rid of it (sticky defaults and the such)
    ….humbuggers, might as well just live with it vlah

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  25. Naushad says
    July 22, 2009, 1:17 pm

    Sir,

    Please help me to avoid Genuine window updation notification.

    Naushad k.v
    Autocad Draughtsman

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  26. fopard says
    July 11, 2009, 7:59 pm

    an alternative:
    you need process explorer and total commander.
    do not need to go to safe mode.
    start PE
    find process winlogon
    dbl click
    go to threads tab
    try to find two handles begin with WGA
    kill both threads.
    open total commander
    goto windows/system32
    rename wgalogon.exe to sg
    rename wgalogon.dll to sg
    press shift+f4, create empty file wgalogon.exe
    close notepad
    press shift+f4, create empty file wgalogon.dll
    close notepad
    set both new 0 byte long files to read only (right click, properties)
    restart windows

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  27. Jordan says
    July 3, 2009, 2:40 pm

    Friggin awesome,
    The little piece of #$%& keeps popping up every time I startup and it’s driving me nuts, nuts, nuts.
    Thanks for great advice.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  28. Destry says
    June 30, 2009, 10:56 pm

    Aha, thanks GHENCEA.
    Thought I’d try your solution first of all.
    The simple rename of the 2 system32 files seems to have done the job.
    So far anyway.
    Thanks for the info. :D :D :D

    And you too, David, for your work, introducing the topic, and providing space for others to contribute :D :D :D

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  29. dopy says
    June 16, 2009, 6:17 pm

    “This is for educational purposes only”

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  30. student says
    June 6, 2009, 3:12 pm

    i got u but m not getting this wgatray.exe from run but i can get it from search wat to do plz guide me

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  31. no name says
    May 28, 2009, 5:29 am

    or you can down load “sysinternals autorun” and disable it but be carefull not to disable anything you need

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  32. Brian says
    May 23, 2009, 7:45 am

    Thanks a lot, dude..
    at last i can kick that shit from my computer!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  33. 3ICE says
    May 14, 2009, 8:48 am

    Ravi is a funny person. :)

    Rebooting means restarting your computer.
    START –> Turn off Computer –> Restart

    Losing all your files only happens when you reinstall your OS. That is an entirely different thing compared to rebooting. (You can not accidentally reinstall your OS either. The disc to do that costs 100 dollars.

    Of course file loss can happen when you reboot, but only if you leave for example Microsoft Word running with an unsaved document in it that you just typed. Close every window (on your screen, not in your office) and save every document you worked on in your session before rebooting.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  34. Ravi says
    May 13, 2009, 9:34 pm

    Umm when you say reboot what do you mean? by like losing all my files n stuff??

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  35. maneendra says
    May 8, 2009, 11:56 am

    hey this is simply superb yaar… its really working thanks alot…

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  36. Olwah says
    May 1, 2009, 1:15 pm

    Oh, that worked a treat! I salute you! Vigorously! In the Face!

    Love and hammers, but mostly love,

    Olwah

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  37. retired engineer says
    April 6, 2009, 2:00 pm

    Thanks, explained a lot. With wgatray running, nothing else would start.

    Sometimes you can rename the offending files without moving them. Just add a number to the file name so you can undo it if Windoze refuses to operate.

    God save us from nanny software that decides how we will use our computers. If my apps would run under Linux, I wouldn’t have this problem.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  38. GHENCEA says
    April 5, 2009, 4:51 am

    I tried this simple move and worked so far : cut the 2 files from system32 : wgatray and wgalogon and move them elsewhere. You can do it even though they are active processes. Restart the computer and…that’s it. After that you can delete the 2 files.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  39. 3ICE says
    April 5, 2009, 1:43 am

    Short, 1-2-3 version of the above tutorial: (1) Reboot into SafeMode, (2) Launch regedit, and (3) Delete all occurrences of “WgaTray”, “WgaLogon” and “LegitCheckControl”.

    Here is a lucky screenshot of WgaLogon.dll as it is being loaded into the memory of a SafeMode’d WinXP: http://img6.imageshack.us/img6/5110/wgalogonstartseveninsaf.jpg (Lucky, because the text only flashed by for a second.)

    If you didn’t find any “WgaTray”s, you are not alone. I don’t seem to have any of them either. If the problem still isn’t fixed by the above, have a go at deleting everything with “Wga” in it too (especially “WgaNotify”).

    –3ICE

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  40. venky says
    March 25, 2009, 12:16 pm

    Thank you very much it helped a lot

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  41. Dean says
    March 24, 2009, 9:14 am

    Hi,
    I’m afraid this has not worked. I went over this several times to ensure I did everything correctly.

    What i did notice is that the only registry it found was on the first search, for wgatray.exe, and it only found one. Pushing F3 found no more, and neither was there any for the other terms searched for

    Cheers
    Dean

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  42. March 17, 2009, 10:24 pm

    @ Wayne delete any and ALL instances of WGAtray.exe regardless of what is connected to the file name, its basically like a virus, make sure your in safe mode , if its still there, lemme know I have other ways to get it off

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  43. Wayne says
    March 17, 2009, 12:49 pm

    I’m running win.xp with sp2 and as other posts stated for some reason I started getting the counterfeit messages and I know the win. is legit.
    I tried what you suggested but it can’t find any wgatray.exe however when I search
    wgatray.exe it finds wgatray.exe-350D4455.pf and says it in windows/prefetch

    My question is do I run that in find and delete all OR are they the same ???

    Thanks

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  44. March 16, 2009, 9:01 pm

    @ Shark,

    Even with all patches from Windows Update, this works to remove the annoying Windows Genuine Advantage, depending on your method of searching registry, you can accidently leave traces of the program, which will re-populate if youve left one instance of it running, thats why I recommend safemode when doing this.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  45. Shark says
    March 16, 2009, 8:49 pm

    This did not work for me, it is not only for Windows (XP or Vista) but office
    I removed all, check 3 times, rebooted, and it was back
    Must have a new hidding place!!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  46. jin says
    March 15, 2009, 12:32 am

    thank you i followed you walkthrough and removed it. Thanks again.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  47. Redsaga says
    March 12, 2009, 12:47 pm

    Thank you so much for the simple walkthrough. Been trying everything else that my modest knowledge with computer allowed without more than temporary removal. I now yours and it seems to work, so thanks again for saving me from this wee bit annoying wgatray!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  48. orlando says
    March 10, 2009, 11:03 pm

    at last i can remove this problem

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  49. anjang k.L says
    February 22, 2009, 7:38 am

    thiis website soooooo goood

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  50. Anjang says
    February 12, 2009, 6:11 pm

    Hi there..

    I had a problem with the office but not with windows. My windows is good but this appered as if i opened up any office software like word, excel powerpoint or even outlook. I have done all as above but this thing still pop up when ever i opened all the office software. Is there other way to disable it.. Need responed..

    Thanks..

    ~anjang~

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  51. Thanks!! says
    January 19, 2009, 4:20 am

    Thanks a lot man! I havent tried this yet but i’m sure it will work. BTW. I have zone alarm and it said wgatray.exe is attempting to access the internet or something and I pressed deny (Dont allow) so i got no notifications. I’m sure it will ask me again on the next update but i’ll do the same. Thanks!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  52. Rhi says
    December 24, 2008, 3:22 pm

    Hold on a minute – is this what is causing my computer to shut down suddenly with a blue screen? I know it’s not a virus , as i’ve got every software known to run and check. Is this wgatray/winlogon thingy an application by any chance?

    I keep getting this every once in a while with a win32sys.exe problem, and just follow the chkdsk repairs and fixes like it says after rebooting and going to the microsoft site. Has this anything to truly do with this WGA at all?

    I know my system is a legit one and i have automatic update on so that i get all the relevant updates etc. However, my question is, if i delete this wga.exe in the regedit, will this not stop the system from updating automatically with all the necessary files? – as that has happened before on the previous pc

    N.B. I’m stating this because i remember the computer i had before was not legit and i had a pc built from scratch free of charge (current one) after this by the same person, and i stressed to him that i want a genuine pc without warnings that it’s not a genuine pc and he said it will be. I don’t even know how to find the license key for this pc and have no disk.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  53. Drako says
    December 15, 2008, 5:10 am

    I have an odd question for you. Has this program ever been taken over / mimicked by a virus? I am having something called wgatray.exe starting from a location it definitively does not belong in… (my H:/ drive when my only OS is located in C:/) It has not attempted to start on any other drive.

    Has this happened to anyone else? I am just trying to figure out if it should be deleted from there and how to get rid of it and maintain my ability to update.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  54. Siva says
    December 2, 2008, 6:38 am

    You are really a worthy guy!!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  55. vahnx says
    November 27, 2008, 1:18 am

    Thanks! One small problem, I think after running Windows Update it makes it come back! I am using the website to do my updates though.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  56. Skyler says
    November 15, 2008, 5:57 am

    dude, this stuff still appears in safe mode. also, when I try finding something in regedit while in safe mode, regedit stops responding and refuses to do anything.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  57. Katrina says
    November 10, 2008, 8:52 am

    Thanks much David. All’s well now, and it’s much appreciated.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  58. Alexander says
    November 5, 2008, 1:52 am

    Cheers. That worked brilliantly.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  59. David says
    November 4, 2008, 12:06 am

    Katrina, you should run regedit under safemode, and make sure that you scan the entire directories twice after deleting and before restarting back into normal mode. If the problem still persists, then I can hop onto crossloop and do it for you. Sorry for the delayed response, I have been ridiculously busy!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  60. Katrina says
    October 26, 2008, 1:28 am

    I’m having a problem.

    There’s a value that I’m not being allowed to delete: ab(default) REG_SZ (value not set)

    I’m able to remove everything else except this, and when I reboot, everything I’ve previously deleted if back again.

    Help!

    Any any advice on how I can cut the heads off this hydra would be most appreciated.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  61. Steve says
    October 21, 2008, 4:51 pm

    I couldn’t find the first file “wgatray”, but I took out the others and I’m back to nornal. Awesome info. Thank you. I would recommend a registry backup / setting a new restore point. Thanks again for the info.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  62. Liz says
    October 8, 2008, 10:04 pm

    Thank you. It cleared up the problem right away!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  63. alex says
    October 1, 2008, 5:15 pm

    worked , helped , thanks alot

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  64. exempt says
    August 28, 2008, 6:29 pm

    glad everyone could use this :) always “informative purposes” to protect my ass!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  65. BRLDTDSSVS says
    August 28, 2008, 4:36 am

    THANKS, WORKED LIKE A CHARM…

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  66. Wuhy says
    June 18, 2008, 5:50 am

    this shit even started in safe mode:@

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
    • lorraine says
      April 5, 2010, 5:09 am

      is it safe? are you guys real or are you planting virus in the registry. Sorry, but in todays world, you do not know what it good and what is bad. Ever in advertisements, the stars really don’t need to try what they are selling. People are more trusted if they are important people.

      VA:F [1.9.22_1171]
      Rating: 0.0/5 (0 votes cast)
      VA:F [1.9.22_1171]
      Rating: 0 (from 0 votes)
      Reply
      • Kcin says
        June 7, 2010, 3:26 pm

        Your a retard… how is DELETING SHIT… causing a VIRUS INSERTION?

        VA:F [1.9.22_1171]
        Rating: 0.0/5 (0 votes cast)
        VA:F [1.9.22_1171]
        Rating: -1 (from 1 vote)
        Reply
  67. leplip says
    June 6, 2008, 2:12 am

    thank you for this info. ive used it and it worked!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  68. David says
    May 13, 2008, 4:25 am

    No Problem, glad I could help!

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  69. Jixx says
    May 12, 2008, 4:13 pm

    “This is for informative purposes only.”

    Quite informative indeed, thanks for the detailed walk-through.
    It worked where others did not.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  70. saki says
    May 9, 2008, 6:56 am

    Thanks man! From annonimous.

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  71. Jay says
    April 13, 2008, 7:30 am

    You’re a god among men. Annoying as shit is an accurate description

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
  72. john says
    August 4, 2006, 10:05 am

    thanks a lot
    this really did the trick saved me a lot of hair tearing
    thanks again

    VA:F [1.9.22_1171]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.22_1171]
    Rating: 0 (from 0 votes)
    Reply
    • zamir says
      May 6, 2011, 9:31 am

      dear i tried ur formula but its not working….i changed it then as:
      search wgalogon.dll and rename it as wgalogon.dll.bak.
      then change name of wgatray.exe as wgatray.exet
      then terminate the wgatray process in end task and then remove both fils from system 32 folder….wgatray.exe will be removed but other will not…then restart system and delete that file too….
      so its easy way now: ) god bless u all

      VA:F [1.9.22_1171]
      Rating: 0.0/5 (0 votes cast)
      VA:F [1.9.22_1171]
      Rating: 0 (from 0 votes)
      Reply

Leave a Reply