1
Software / WGA Notifications Haunt InValid OS'
« on: April 26, 2006, 05:04:53 PM »
The update appears like this in Windows Update:

When you install this windows update and reboot, it shows the following screens:


This update modifies two files:
windows\system32\LegitCheckControl.dll
windows\system32\spmsg.dll
And adds two new files:
windows\system32\WgaLogon.dll
windows\system32\WgaTray.exe
This update can NOT be removed through add/remove programs after you install it!
To manually remove it you would need to boot off a Windows 98 boot disk (if your hard drive is fat32), or put your hard drive into another computer. Delete the two added files, and overwrite the two modified files with these two clean files below:
spmsg.dll
LegitCheckControl.dll
*Note: These files are from Windows XP Professional/Corp SP2, they may or may not work on SP1.
Just for your reference, here is the settings file it uses when installing:
Balloon interval = 2 hours
Show notification for every 1 logins
DaysBeforeBuyNow Unactivated = 31
DaysBeforeBuyNow Nongenuine = 14
Disabled = false
Reduced reminders = false
It would appear that after 14 or 31 days it would make you "buynow", and NOT let you login, but this is untested.
For educational purposes only.
Quality post? Only by you know who.
-Jamie M.

When you install this windows update and reboot, it shows the following screens:


This update modifies two files:
windows\system32\LegitCheckControl.dll
windows\system32\spmsg.dll
And adds two new files:
windows\system32\WgaLogon.dll
windows\system32\WgaTray.exe
This update can NOT be removed through add/remove programs after you install it!
To manually remove it you would need to boot off a Windows 98 boot disk (if your hard drive is fat32), or put your hard drive into another computer. Delete the two added files, and overwrite the two modified files with these two clean files below:
spmsg.dll
LegitCheckControl.dll
*Note: These files are from Windows XP Professional/Corp SP2, they may or may not work on SP1.
Just for your reference, here is the settings file it uses when installing:
Balloon interval = 2 hours
Show notification for every 1 logins
DaysBeforeBuyNow Unactivated = 31
DaysBeforeBuyNow Nongenuine = 14
Disabled = false
Reduced reminders = false
It would appear that after 14 or 31 days it would make you "buynow", and NOT let you login, but this is untested.
For educational purposes only.
Quality post? Only by you know who.
-Jamie M.