Remove Genuine Advantage Notification in Windows 7
Windows 7 may sometimes been detected as illegal, not genuine,or Pirated despite the operating system has been genuinely bought from market. Then it shows a message immediately after log on, the following Windows Activation window will be displayed.
Windows is not genuine
Your computer might not be running a counterfeit copy of Windows.
0×80070005

Moreover, the computer desktop background is turned to black, after some time of logging in and the following error message is shown on the bottom right corner of the screen:
This copy of Windows is not genuine

When you try to view the system information in System Properties (Control Panel -> System and Security -> System), the following error message can be seen:
You must activate today. Activate Windows now
Using slmgr.vbs /dlv or slmgr.vbs /dli in an elevated command prompt with administrator privileges to view the licensing status will return the following message instead:
Error: 0×80070005 Access denied: the requested action requires elevated privileges

Normally, the suddenly or random deactivation of an activated Windows 7 on genuine platform can be resolved by simply restarting the computer, so thatWindows 7 can re-access the activation status to return the computer to activated status. However, in some cases, where modification has been done to HKU\S-1-5-20 registry key causing the Network Service account to lose and missing full control and read permissions over the registry key, the losing of activated status may happen on Windows 7 too.
Microsoft explains in KB2008385 that the possible cause for the Windows 7 turned pirated error is likely the result of applying a Plug and Play Group Policy object (GPO):
Computer Configuration -> Policies -> Windows Settings -> Security Settings -> System Services -> Plug and Play (Startup Mode: Automatic)
The Windows 7 Licensing service uses Plug and Play to obtain hardware ID information and binds the license to the computer, thus change to the setting can result in an activated system appearing to be out of tolerance. The default permissions of the Plug and Play policy do not grant the Licensing service, which runs under the Network Service account, the appropriate rights to access the Plug and Play service. To fix and resolve the Windows 7 activation lost issue, and make the Windows 7 activated and genuine again, just follow one of the two Methods stated Below:

Method I: Disable the Plug and Play Policy
Determine the source of the policy. To do this, follow these steps:
On the client computer experiencing the activation error, run the Resultant Set of Policy wizard by clicking Start >> Run (or press Win+R keys), and entering rsop.msc as the command.

Visit the following location:
Computer Configuration -> Policies -> Windows Settings ->Security Settings -> System Services
Visit the following location:
Computer Configuration -> Policies -> Windows Settings ->Security Settings -> System Services

If the Plug and Play service is configured through a Group Policy setting, you see it here with settings other than Not Defined. Additionally, you can see which Group Policy is applying this setting.
Disable the Group Policy settings and force the Group Policy to be reapplied.
Edit the Group Policy that is identified in Step 1 and change the setting to “Not Defined.” Or, follow the section below to add the required permissions for the Network Service account.
Force the Group Policy setting to reapply: gpupdate /force (a restart of the client is sometimes required).
Method II: Edit the permissions of the Group Policy
Open the Group Policy that is identified in Method I, Step 1 above, and open the corresponding Group Policy setting.
Click the Edit Security button, and then click the Advanced button.
In the Advanced Security Settings for Plug and Play window click Addand then add the SERVICE account. Then, click OK.
Select the following permissions in the Allow section and then click OK:Query template
Query status
Enumerate dependents
Interrogate
User-defined control
Read permissions
Run gpupdate /force after applying the permissions to the Group Policy setting.
Verify that the appropriate permissions are applied with the following command:sc sdshow plugplay
The following are the rights applied to the Plug and Play service in SDDL:D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)
(A;;CCLCSWLOCRRC;;;IU)
(A;;CCLCSWLOCRRC;;;SU)
S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)Note: (A;;CC LC SW LO CR RC ;;;SU is an Access Control Entry (ACE) that allows the following rights to “SU” (SDDL_SERVICE – Service logon user):A: Access Allowed
CC: Create Child
LC: List Children
SW: Self Write
LO: List Object
CR: Control Access
RC: Read Control
SU: Service Logon User
If there are no GPO’s in place, then another activity may have changed the default registry permissions. To resolve this problem, perform the following steps:
Click Start Menu, Then Run, then enter REGEDIT
Right-click the registry key HKEY_USERS\S-1-5-20, and select Permissions… button.
If the NETWORK SERVICE is not present, click Add… button.
In Enter the object names to select type Network Service and then click Check Names andOK.
Select the NETWORK SERVICE and Grant Full Control and Read permissions.
Restart the computer.
After the restart, the system may require activation. Complete the activation.

Disable and Remove Windows Genuine Advantage Notifications Nag Screen
Microsoft has released WGA Notifications application which effectively turned Microsoft Windows operating system into a ‘nagware’, with a “This copy of Windows is not genuine” warning. What the Windows Genuine Advantage Notifications application does what it will check your Microsoft Windows XP validity. If it found that the copy of Windows XP is not validated, not genuine, counterfeit, unlicensed, pirated, illegal, unauthorised or simply failed the Windows Genuine Advantage validation process, then the notification messages will appear at various places and time.

When you log on to a non-genuine copy of Windows XP, the following notification error message “This copy of Windows is not genuine” will pop-up on the logon process:

And the nicely said “You may be a victim of software counterfeiting” message on the bottom right corner of log-in screen:

Microsoft allows Windows faithfuls to have 2 options: Get Genuine or Resolve Later. Click on Resolve Later will temporarily bypass the notification and let you login into and use Windows nagged with notification icon and messages, which will randomly appear as balloon notification message with an icon in the notification area (system tray).

Clicking on the balloon notification or the notification area icon will lead you to the Windows Genuine Advantage Validation Failure Web page that contains the specifics of the validation failure and the steps that you can take to make the operating system genuine.

To get rid of the WGA notifications that intends to remind you that your Windows is not validated, you can buy a validly licensed copy of genuine Microsoft Windows.

Update: Bypass WGA Validation with Crack or Hack and Disable WGA Notifications Warning Message Workarounds

Latest Version: 1.5.554.0 on October 2006 (distribute to some computers with no known roll-out pattern), 1.5.708.0 on September 2006 (distribute to whoever wants to download from Microsoft Download Center), 1.5.540.0 on 28th June 2006, 1.5.532.2 on 6th June 2006, 1.5.532.0 on 30th May 2006, 1.5.530.0 on 23rd May 2006, 1.5.526.0 on 26th April 2006.

More information on WGA Validation Tool (KB892130) and WGA Notifications (KB905474) which install LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe.

With new release of WGA, some methods no longer works, and some has been updated. Several methods that has certain success on certain people, you may try until you success.

Official Method by Microsoft – more information here.
First Method
Lauch Windows Task Manager.
End wgatray.exe process in Task Manager.
Restart Windows XP in Safe Mode.
Delete WgaTray.exe from c:\Windows\System32.
Delete WgaTray.exe from c:\Windows\System32\dllcache.
Lauch RegEdit.
Browse to the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Winlogon\Notify
Delete the folder ‘WgaLogon’ and all its contents
Reboot Windows XP.

Note: With this method, you may be prompted to install WGA Notifications again which can still be unselected.

Second Method
Another alternative suggested by dman is by using System Restore to restore the PC to a previous restore point that WGA Notifications hasn’t kicked in, and then carefully stop KB905474 from been applied to the system. To use System Restore, go to Start -> All Programs -> Accessories -> System Tools -> System Restore.

Note: Again, you may be prompted again to install WGA Notification, so it must be bypassed.

Third Method updated
This method involves using a cracked version of LegitCheckControl.dll to replace the original copy of LegitCheckControl.dll, and thus bypass the WGA validation and make Microsoft believes that your copy of Windows is genuine. To get rid of WGA Notifications warning messages, the patched version of WgaLogon.dll and WgaTray.exe to replace the existing files.

To apply the patch by replacing the files manually, try to end the respective processes in the Task Manager before deleting the existing files. Most likely is you will have to restart your PC in Safe Mode in order to replacing the original copy of LegitCheckControl.dll and related files. However, there has been automatic updater and even cracked WGA installer that automatically apply the patched version of WGA files.

Latest Update for WGA version 1.5.708.0 latest

Download cracked and patched version of LegitCheckControl.dll with thanks to Danny.

Latest Update for WGA version 1.5.554.0 latest

Download cracked and patched version of LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe for v1.5.554.0 of Windows Genuine Advantage Validation Tool and WGA Notifications.

John suggested that it may be rolled out to reduce the frequency of ‘phone home’ feature. BetaNews has confirmed this and says Microsoft has completed the pilot phase for WGA Notifications, officially rolling out the anti-piracy reminders to Windows XP users worldwide. Anyway if Notifications Tools is patched, it won’t callbacks at all. Swissboy found that now there are 15 languages supported for KB905474 and offers solution.

General release version of Windows Genuine Advantage Notifications also has updated EULA which says installing of this update is optional. However, once installed, the update will become a permanent part of your Windows XP software, means you can’t uninstall it. The EULA also confirms that information about your system will be sent to Microsoft. You can just skip installing the KB905474 by clicking “I Decline” when shown the EULA. If you don’t want the Automatic Updates or Windows Updates to try install WGA Notifications again, click Don’t ask me to install these updates again at Decline EULA window.

Latest Update for WGA version 1.5.532.2

Version 1.5.532.2 of WGA Validation Tool and WGA Notifications is NOT YET mass released to all Windows system, so your system may not have this version.

WindowsXP-KB905474-ENU-x86-1.5.532.2-noWGA.exe (as suggested by swissboy) is the original setup of KB905474, but with the 3 files as mentioned above replaced with patched version and re-packed. You can view the contents with WinRAR or 7-Zip. Download WindowsXP-KB905474-ENU-x86-1.5. (Removed due to compliant from Microsoft)

LegitCheckControl.dll-v1.5.532.2-Jun-02-2006.zip (as suggested by swissboy) contains hacked version of LegitCheckControl.dll which you have to replace manually over the existing dll in \Windows\System32 folder. Download LegitCheckControl.dll-v1.5.532. (Deleted due to complaint from Microsoft)

New: More automated WGA removal tool: RemoveWGA

Latest Update for WGA version 1.5.532.0

LegitCheckControl1.5.532.0.muiz.fixed.rar (suggested by Picard) is the patched LegitCheckControl.dll and can be download LegitCheckControl1.5.532.0.mui (removed due to complaint from Microsoft).

If LegitCheckControl.dll alone doesn’t work, try to patch the other two WGA files too, namely WgaLogon.dll and WgaTray.exe. Download the the patches for 3 files WGA_Patch_3files.rar (Removed due to complaint from Microsoft). Overwrite the original files with these hacked version in \Windows\System32 folder. The patch should remove notifications nag screen and allows Windows Update.

There are also several automated tools that save the dirty works of have to manually overwrites and replaces the WGA applications.

WGAPatch905474 (suggested by SilverBullet) contains 905474.exe that will patch Windows to allow access to full (custom) Windows Update and get rid of nag screen. Download 905474.exe WgaPatch905474.zip (removed due to complaint from Microsoft).

There are also several patched WGANotify KB905474 installation setup which will install KB905474 WGAnotify with the 3 patched WGA files namely LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe. One of them is HotFix windowsxp-kb905474-enu-x86.exe suggested by DeaDMan Walking, which will after install, disable notifications nag screen and allows update. Download Cracked_KB905474_Hotfix.rar or Cracked_KB905474_Hotfix.rar (removed coz of Microsoft complaint).

WindowsXP-KB905474-ENU-x86-v1.5.532.0-noWGA.exe (suggested by Swissboy) is also the patched KB905474 setup file which is actually the original setup of KB905474, but with the 3 files replaced. Download it WindowsXP-KB905474-ENU-x86-v1 (removed due to Microsoft compliant).

Old Updates

Version 1.5.530.0 of cracked LegitCheckControl.dll (suggested by chucko), can also be downloaded WGAFixer1.5.526.0.exe or LegitCheckControl_1.5.0530.0.zip (obsolete links, visit here for updates).

Use the latest cracked LegitCheckControl.dll by searching for “Windows.Genuine.Advantage.Validation.v1.5.526.0.CRACKED-ETH0″. Can also be downloaded here (obsolete link, update here). Cracked LegitCheckControl.dll also available – LegitCheckControl.dll or LegitCheckControl.dll-v1.5.526.0-Abr-10-2006.zip (obsolete links, updates available here). Once download the cracked dll, replace the LegitCheckControl.dll in \Windows\System32 folder with the cracked version. You may need to restart your PC in safe mode to replace the files.

Forth Method
Jules found that by disabling and renaming the files ‘WgaLogon.dll’ and ‘WgaTray.exe’ in C:\WINDOWS\system32 folder by using the program Unlocker seems to get rid of all the nags/popups.

Fifth Method
Clear the contents or create a new empty data.dat for WGA, and make data.dat Read-Only and Hidden as detailed here.

The following step basically is the same with the above data.dat method, only different is that you no need to create any file in the WGA data folder:
Launch Windows Explorer and go to C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data
Go to Tools -> Folder Option -> View.
Select (click) Show Hidden Files and Folders option.
Unselect (uncheck) Hide Protected Operating System Files option.
Click OK.
Delete everything in the data folder.
Right click on data folder, and select Properties.
Select (Check) Read-Only as the folder’s atributes.
Click OK or Apply.

Update: After 30 May 2006 with the release of WGA 1.5.532.0, this method no longer works. If the data.dat is set to “Read-Only”, WGA may complains that the serial key from the file could not be read, making the WGA validation failed even with the cracked dll files. So just delete the file (and make sure the folder is not set to “Read-Only”), WGA will then automatically regenerate the file and create the key, so you will pass the validation if you have the correct patched dll installed.

Sixth Method
Another alternative suggest that three files are installed Windows XP System Folder for WGA:

\WINDOWS\system32\WgaLogon.dll
\WINDOWS\system32\WgaTray.exe
\WINDOWS\system32\LegitCheckControl.dll

The wgatray.exe process makes the check for genuine windows software. If WgaLogon.dll is denied execution right, that WinLogon is unable to call it to check on Windows validity and display notification package at boot, and since WgaLogon is also responsible for running and maintaining WgaTray.exe, no more tray popups either.

To change and disable the execute bit of WgaLogon.dll:
Turn off Simple File Sharing in Tools -> Folder Options -> View tab.
Right click WgaLogon.dll in Windows Explorer and open the Security Tab.
Click Advanced button.
Uncheck the Inherit box at the bottom.
Click the Copy button.
Click OK.
Go through each listed user/group and remove the “Read & Execute” permission for WgaLogon.dll, leaving the “Read” permission as-is.
Click OK to apply the permission changes.
Close the file properties dialog.
Restart the computer.
Turn “Use simple file sharing” on (optional).

Optionally, steps suggested by PSNet which has the same effect – disabling WgaLogon.dll.

Seventh Method
This method doesn’t remove WGA notification tool, instead just disable the annoying pop-ups and nags screen. Currently, you can opt out of receiving all the pop ups on start up and be left with just the star.

Right click on the WGA star in the system tray and choose ‘change notification settings’. When the web page loaded, click the + next to the “Windows Genuine Advantage Notifications Options”. Then untick (unselect) the “Display Windows Genuine Advantage Notifications messages” box and click “Save Settings”.

The page will now refresh with a new option “I understand that I am disabling the display of messages in this version of Windows Genuine Advantage Notifications”. Select by ticking the box and click “Yes, Im Sure”. After that, reboot the PC and all the nags will be gone although the Blue Star WGA icon stays in the taskbar but it doesnt pop up any warning messages.

Best of all, this is the legal way of getting rid of the annoying warning messages, although Microsoft said this resolution to be around for temporary only.

Eight Method
Install ZoneAlarm firewall, and configure to kill or disallow “WGA” in the allowed programs section.

Ninth Method
Download and install Autoruns from www.sysinternals.com. Run the program, go to the WinLogon tab and uncheck (disable) the WgaLogon, as suggested by PSnet.

Tenth Method
Steve suggested the following:

1. Go to \windows\system32 in explorer
2. Rename WgaLogon.dll to WgaLogon.dll.bak
3. Create a new empty WgaLogon.dll in notepad and save to the same location
4. Right click on the task bar, and open Task Manager at the Processes tab
5. (Quickly) delete WgaTray.exe, then it will give you approx 5 seconds to click on WgaTray.exe in Task Manager and click End Task, and confirm
6. Restart your computer and the login and nag messages should be gone

Again, this method will help to disable the WGA warning notifications only.

Eleventh Method
Dhillip wrote an utility Windows Genuine Advantage Notifications Remover which can help to remove the warning messages.

Melhacker also wrote WGARemover tool to remove WGA.

Note: The file WGANotify Remover has been deleted and all assumed no longer works for new version of WGA.

Twelveth Method
WGA Notifications Patch is a series of steps to disable notifications message suggested by Tekken.

Thirteenth Method
Download WGAFixer (WGAFixer1.5.530.0.exe) which replaces the LegitCheckControl.dll version 1.5.530.0 and modifies the WGA related registry.

Fourteenth Method
If you have installed KB905474 (Windows Genuine Advantage Notifications) which is currently an optional component although it’s grouped as High Priority Update, there is no official and proper way of uninstalling KB905474 (according to EULA, you can’t uninstall it). However, there seems a way of uninstall or at least way to partly remove KB905474 WGA Notifications suggested by TechTics:
Click on Start -> Run.
In the Open text box, key in %windir%\system32\wgatray.exe /u
Press OK or Enter to execute it.
Click on Start -> Run again.
Launch Registry Editor by key in regedit in the Open text box.
Navigate to the following key and delete the key and its branch.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon
Reboot the PC and WGA Notifications should be removed.
Optionally, you may delete the WgaTray.exe and WgaLogon.dll installed by KB905474 and its software distribution folder by using the following commands at Run function:

cmd /c “del %windir%\system32\wgatray.exe”
cmd /c “del %windir%\system32\WGAlogon.dll”
cmd /c “rmdir /s /q %windir%\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a”

However, this method just removed the warning message notifications of WGA about pirated Windows, and you will be almost immediately be asked to install KB905474 again. So be sure to unselect the KB905474 when asked to install updates in Automatic Updates or Microsoft/Windows Updates.

Fifteenth Method
A registry hack for WGA suggested by PBLee. Copy the text below into notepad (including the ‘Windows Registry Editor Version 5.00′ heading), then save the file as a .reg file. Alternatively, download the wga.reg fix. Double click on the file to apply the registry patch.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
"Logon"="WLEventLogon"
"Logoff"="WLEventLogoff"
"Startup"="WLEventStartup"
"Shutdown"="WLEventShutdown"
"StartScreenSaver"="WLEventStartScreenSaver"
"StopScreenSaver"="WLEventStopScreenSaver"
"Lock"="WLEventLock"
"Unlock"="WLEventUnlock"
"StartShell"="WLEventStartShell"
"PostShell"="WLEventPostShell"
"Disconnect"="WLEventDisconnect"
"Reconnect"="WLEventReconnect"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000000
"SafeMode"=dword:00000001
"MaxWait"=dword:ffffffff
"DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67,00,6f,00,6e,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Event"=dword:00000001
"InstallNotifyShown"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Settings]
"Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,\
00,00,69,56,c4,80,41,b9,4a,43,bf,97,3b,98,06,7e,34,57,04,00,00,00,04,00,00,\
00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,14,d8,49,b1,9b,43,d1,7b,\
b9,7c,85,a2,9c,f6,c8,b7,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,e4,\
59,49,a2,0f,ee,a6,23,78,e5,c8,91,3e,f7,40,64,70,06,00,00,1a,2b,76,12,0e,6c,\
b9,0e,f2,68,c3,ba,11,32,b8,e4,1c,4d,63,45,b4,42,e6,b8,95,49,31,9c,45,ab,21,\
39,25,c2,a5,6d,36,3d,63,a4,75,e7,97,05,c7,62,52,76,9b,71,26,06,ae,28,08,77,\
22,d0,21,9d,1b,f9,ea,7a,b3,b1,07,2c,6b,17,48,06,10,1e,10,48,06,32,a6,fb,16,\
cf,b7,2e,d6,00,42,d8,2e,47,ad,87,45,2a,7e,c8,5a,1c,e3,99,dc,3c,8c,a7,29,a4,\
cd,ad,c8,d9,52,64,d9,16,00,81,ff,66,fd,f2,d2,17,ee,92,8d,a4,38,06,70,63,f9,\
0b,55,be,b5,c0,5a,8a,3e,b9,fb,13,8c,c1,df,50,61,d5,60,89,9a,0d,36,0d,3f,2e,\
77,7c,04,ef,8d,76,41,07,75,27,d2,ac,11,62,1a,7f,91,35,22,4f,0e,92,6d,2d,45,\
e9,e3,ad,0e,33,46,b4,03,b5,94,2d,9b,d7,f1,62,f9,0e,b1,9f,56,bd,80,7a,44,06,\
9f,80,19,45,bd,04,56,9c,5d,eb,fb,10,59,cd,5e,02,66,b6,af,de,d0,4e,08,ca,ff,\
44,d6,e6,a6,b1,50,cd,e9,de,f6,b9,06,90,45,f8,c7,ec,44,73,b8,8f,0f,3d,27,a7,\
32,42,2d,04,c1,a2,e2,c2,23,70,97,10,09,a2,05,00,58,95,00,94,7f,74,4e,18,e0,\
0d,e7,be,3e,2c,3e,7c,5d,c4,26,fd,bb,08,e0,c8,01,2e,db,5a,51,80,8f,f4,3e,6e,\
53,52,3d,a7,52,aa,c6,8e,fd,33,26,03,e8,3d,81,d8,c5,82,0a,ce,14,ae,29,d4,16,\
0f,7d,83,30,d1,4d,13,d9,72,52,8f,db,4c,43,63,cb,dc,97,a8,86,83,85,e6,ad,00,\
a2,13,23,c8,3a,f0,50,a7,58,ae,eb,b3,e6,1f,a4,5f,6f,5d,a1,1b,c8,1f,9e,c4,ed,\
48,53,1d,82,0d,1c,a2,6f,b6,8a,67,1a,bc,c8,de,2a,56,d9,7a,b6,e9,83,28,ab,44,\
fb,06,0b,3b,0d,9f,3e,e5,3e,5f,ff,97,eb,0c,9f,b8,4a,8b,6a,fc,91,34,64,ac,7e,\
e8,41,5d,ae,3c,59,71,2f,67,08,9c,a2,d6,88,8f,3c,e9,a9,eb,fc,b9,77,c6,ff,b6,\
66,24,b7,65,31,0e,95,64,5f,5e,af,f1,a3,f1,f2,16,f9,53,52,f1,46,77,31,4b,ad,\
62,ed,38,93,d4,c0,e9,50,db,b8,7f,68,c5,89,c9,58,a6,e2,17,9c,5b,35,54,3b,9e,\
28,6e,39,8c,bf,01,b8,3a,7a,2f,ee,07,54,ec,84,90,4b,a2,4e,24,06,19,da,e9,f3,\
1d,b1,a0,f8,1d,fc,c3,42,1a,d0,42,ba,95,8b,4b,af,16,6d,35,3e,a2,d3,9b,a1,39,\
2f,d7,a0,50,51,8e,2c,52,87,67,17,26,54,7e,de,7d,ed,68,97,66,1b,5a,c0,3f,8d,\
22,b7,8f,21,1b,51,7a,28,67,d4,ed,81,cf,fc,94,0b,ca,14,c6,8d,85,2b,e2,a5,5e,\
2a,70,50,70,59,1e,a2,aa,d8,cc,eb,59,89,36,ca,b8,15,e9,3b,14,82,86,20,9f,8a,\
45,cd,35,0c,fb,1f,52,d0,26,27,f8,ff,e3,ae,b4,80,75,c6,7b,b1,11,ab,47,8e,3f,\
11,fc,b5,1f,f9,65,e3,8a,e1,6b,68,20,e4,c3,cb,91,1e,03,99,84,48,00,a2,18,9e,\
c8,ae,54,4c,92,99,fd,03,66,17,aa,b0,d7,38,3f,d2,d6,a0,10,f1,ab,09,79,9f,ef,\
0d,5c,45,01,01,1d,cc,12,ce,d0,a4,de,e2,b2,42,45,be,ba,a9,d4,8c,7c,05,d8,7c,\
0e,48,8b,3b,0a,a5,74,90,6e,fa,ce,5f,42,93,51,19,8e,5f,6e,bd,a1,ce,cc,a3,89,\
a6,28,70,e6,0a,c7,38,56,4d,4f,89,35,8d,e1,73,2c,e6,ab,24,aa,d2,dc,cb,09,5e,\
97,aa,f6,cf,9d,ed,4f,4f,b6,27,28,ba,fe,78,f4,be,82,68,86,fb,9f,77,d2,6a,dd,\
72,86,b5,ce,da,bb,29,37,d7,e1,0e,5e,80,77,61,57,1b,6e,ae,ae,11,ae,46,98,3d,\
da,fb,3a,92,a4,8e,68,b7,24,1a,cf,8e,06,8b,63,c3,8b,55,15,c2,df,b1,97,b4,b0,\
4a,99,7d,f7,1b,8b,48,38,74,24,1c,be,c3,57,35,75,ec,ba,3e,3e,f9,03,d7,a6,9f,\
75,8b,91,73,37,27,d9,a1,4c,64,19,28,f4,54,76,81,22,1e,8a,63,c6,b0,5f,f3,f3,\
7e,d8,f6,e1,3a,06,4e,2f,3b,d6,a8,8f,a9,49,26,3d,3d,16,e4,cb,ce,8d,46,26,52,\
38,95,0d,2a,98,77,f1,c7,11,b9,da,1c,f1,c9,60,b1,97,14,4a,d5,40,53,02,f8,5e,\
de,53,27,58,94,bd,00,74,4b,04,16,35,8d,00,b0,dd,fe,43,ef,3f,84,eb,b5,f8,1d,\
72,45,b0,7a,94,99,c9,91,11,59,d5,f6,e6,69,d4,4f,e6,69,d3,cf,75,73,53,9f,82,\
2b,94,68,e4,c2,af,1e,4b,99,ea,c3,1c,9d,20,8f,cd,8d,40,af,bf,e1,be,93,02,de,\
05,40,56,2f,e2,2d,57,c0,24,f3,63,43,0d,3c,4d,de,28,ed,98,96,74,59,a5,83,8e,\
d8,be,09,15,9a,7e,f5,df,95,24,15,07,27,06,11,6a,a1,82,d8,20,35,71,9e,c5,9b,\
56,64,45,43,96,a0,55,23,c4,57,8a,c2,bc,ab,a8,ef,04,a7,27,8b,98,9c,83,5c,a7,\
55,11,d2,61,15,47,e7,d4,da,f9,33,6e,bd,de,9e,5a,eb,39,f2,9b,b2,f8,44,40,01,\
ec,5e,8b,4d,79,d3,df,b2,db,0b,b8,80,b8,9a,7e,fe,1d,08,c9,5d,21,43,23,50,1d,\
0c,a2,aa,d6,53,b9,a6,4c,9f,a2,3e,ee,65,21,46,5c,3c,63,79,68,58,60,94,87,ce,\
3f,f3,82,e9,03,b3,7e,91,ce,3d,dd,42,2a,cd,a6,01,0f,b7,51,0e,1a,b4,bd,7b,7e,\
7d,22,19,15,c3,7f,40,9f,70,de,6a,27,f7,05,b1,e0,95,31,fe,6c,6f,49,62,a1,37,\
be,7e,66,1d,35,7b,ee,1c,e2,46,ef,10,94,d5,c4,97,7d,06,fc,a1,11,9b,1c,17,08,\
5f,8f,d2,5f,fe,2f,56,19,f5,a5,49,b0,9b,ee,5a,e4,88,c1,77,d2,83,90,1f,5b,8a,\
54,77,d5,ca,9d,81,a1,7b,73,a2,31,31,d4,27,57,dc,11,f0,0b,a9,e9,f4,2f,5b,6a,\
3c,db,49,3a,5c,90,19,b9,bc,07,7f,1b,b9,ae,3f,fe,a1,f8,9f,39,0e,34,10,fe,a1,\
8a,04,cd,48,47,c9,ba,a6,35,cc,36,61,51,36,96,a9,2a,a8,c5,61,0c,c3,97,c2,c5,\
71,ae,93,b4,f4,37,68,fb,b9,9a,77,a1,6c,9f,c3,1a,e6,10,63,0c,44,fe,ce,68,44,\
86,07,91,e3,d2,6f,b7,1b,81,5b,14,9b,33,1b,1b,78,31,e8,3e,60,aa,38,59,f2,91,\
e9,75,90,a7,1e,a9,c8,13,c9,a9,3e,0c,8b,44,72,ec,cc,45,d3,11,7b,0e,1c,ac,76,\
ac,0e,52,72,89,17,9d,23,13,af,7c,65,45,76,1d,d5,ab,f5,b0,9e,b4,20,6b,be,b2,\
57,e6,73,ff,6b,69,dc,4a,76,13,c3,e3,e7,41,62,88,a0,54,11,6a,6a,31,f9,b1,25,\
cc,c2,06,dc,d3,88,02,82,69,70,2e,09,9f,64,40,88,c9,ff,6a,ee,66,69,5d,ca,79,\
b9,f0,03,23,b8,c9,1b,d9,f6,9b,d4,65,85,4c,d4,c4,09,fd,a5,45,ad,ad,49,bb,c7,\
fb,b8,2a,46,e1,15,09,1a,5e,1c,e7,16,e6,a7,8b,e4,42,d1,07,8a,ec,b4,eb,d0,09,\
c9,bd,24,89,1f,28,65,99,72,bd,3b,ca,6b,fd,f2,24,63,2a,0b,d9,c7,9a,4b,c1,29,\
21,17,7b,23,60,2c,06,db,ac,64,b7,7d,83,80,0d,ef,58,a8,a5,6f,df,9c,16,0c,5d,\
ff,ec,db,de,72,80,66,7f,0c,65,82,45,c3,b8,9a,5e,cd,0f,3d,bf,5f,cf,93,db,fc,\
5f,89,de,8b,82,88,33,ad,83,d6,bb,fd,f2,24,f5,df,ee,14,00,00,00,af,22,08,52,\
f6,a0,30,d5,4e,c6,b8,bf,fd,67,be,a7,73,67,db,7d

There is another similar registry hack which patch WPA related registry entries to let Windows assumes itself is a genuine copy of Windows and has been activated. To apply the registry modification, copy and paste the following code into a text file, and save it as a file with .reg extension. Then simply double click on the .reg file created to apply it to Windows registry. Or to save your work, simply download the zip file named wpa_registry.rar that contains wpa_registry.reg. Double click on wpa_registry.reg to apply the patch. Once applied, the hack should allows users to access and download updates from Microsoft Windows Update and install certain WGA-protected software such as IE7.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WPAEvents]
"OOBETimer"=hex:ff,d5,71,d6,8b,6a,8d,6f,d5,33,93,fd
"LastWPAEventLogged"=hex:d5,07,05,00,06,00,07,00,0f,00,38,00,24,00,fd,02

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
"CurrentBuild"="1.511.1 () (Obsolete data - do not use)"
"InstallDate"=dword:427cdd95
"ProductId"="69831-640-1780577-45389"
"DigitalProductId"=hex:a4,00,00,00,03,00,00,00,36,39,38,33,31,2d,36,34,30,2d,\
31,37,38,30,35,37,37,2d,34,35,33,38,39,00,5a,00,00,00,41,32,32,2d,30,30,30,\
30,31,00,00,00,00,00,00,00,00,0d,04,89,b2,15,1b,c4,ee,62,4f,e6,64,6f,01,00,\
00,00,00,00,27,ed,85,43,a2,20,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,31,34,35,30,34,00,00,00,00,00,00,00,ce,0e,\
00,00,12,42,15,a0,00,08,00,00,87,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,94,a2,b3,ac
"LicenseInfo"=hex:9e,bf,09,d0,3a,76,a5,27,bb,f2,da,88,58,ce,58,e9,05,6b,0b,82,\
c3,74,ab,42,0d,fb,ee,c3,ea,57,d0,9d,67,a5,3d,6e,42,0d,60,c0,1a,70,24,46,16,\
0a,0a,ce,0d,b8,27,4a,46,53,f3,17

The “Windows Genuine Advantage Notification” (KB905474) cannot be uninstalled by Add/Remove Program in Control Panel by default, contrary to the claim in the knowledge base article. To enable the removal of KB905474 WGA Notification tool, follow the below steps:

Note: It seems like it’s not possible to uninstall WGA Notifications from Add/Remove Program. Cobolhacker has details on why KB905474 cannot be uninstalled. Suggested steps to “uninstall” are search and delete all WgaTray.exe and WgaLogon.dll files in your boot drive (if you using search, check the “Search system folders”, “Search hidden files and folders” and “Search subfolders” checkboxes), delete all the register keys in the following tree: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, and to remove the entry from Add/Remove Programs list, delete the registry key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Uninstall\WgaNotify. With uninstallation, WGA Notifications will try to install again next time.
Click on Start.
Click on Run.
Type in regedit in the Run text box.
Click OK or press Enter.
In Registry Editor, browse the the following registry key branch:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\WgaNotify
On the right panel, modify the value of NoRemove (by right clicking on the key and choose Modify) to 0.
Exit the Registry Editor.
Re-launch the Add/Remove Program, and Windows Genuine Advantage Notifications (KB905474) is now removable.

Prevention is always better than cure. So the best to avoid the the KB905474 Windows Genuine Advantage Notification application to be automatically downloaded and applied by Automatic Updates is to disable Automatic Updates. Go to Automatic Updates in Control Panel and disable it by selecting Turn off Automatic Updates, or if you still want to receive the critical patches from Microsoft, select Download updates for me, but let me choose when to install them or Notify me but don’t automatically download or install them. Remember to uncheck (deselect) Windows Genuine Advantage Notification (KB905474) when prompted to install any updates.

If you have already install the WGA update, you can use the old hacked/cracked version of LegitCheckControl.dll to remove the annoying nagging message. But Windows Update will still ask you to install it since it’s a newer version which is 1.5.526, unless there is newer version of cracked LegitCheckControl.dll available. You may however try to “up” the version of hacked LegitCheckControl.dll yourself by using the following method:
Get the patched/hacked “LegitCheckControl.dll” from the internet (e.g from link above or any file sharing service)
Install Resource Hacker if you still don’t.
Open both (original in Windows/System32 and hacked version) “LegitCheckControl.dll” files with Resource Hacker.
Go to “Version Info”, replace the version info of the patched File with the version information from new original LegitCheckControl.dll.


1 VERSIONINFO
FILEVERSION 1,5,526,0
PRODUCTVERSION 1,5,526,0
FILEOS 0×4
FILETYPE 0×1
{
BLOCK “StringFileInfo”
{
BLOCK “040904B0″
{
VALUE “CompanyName”, “Microsoft Corp.”
VALUE “FileDescription”, “Windows Genuine Advantage Validation”
VALUE “InternalName”, “LegitCheckControl”
VALUE “LegalCopyright”, “Copyright © 1995-2004 Microsoft Corp.”
VALUE “LegalTrademarks”, “Microsoft® is a registered trademark of Microsoft Corporation.”
VALUE “OriginalFilename”, “LegitCheckControl.dll”
VALUE “ProductName”, “Microsoft® CoReXT”
VALUE “FileVersion”, “1.5.0526.0?
VALUE “ProductVersion”, “1.5.0526.0″
VALUE “PrivateBuild”, “Built by gacald on WGA-FILE-SVR.”
}
}

BLOCK “VarFileInfo”
{
VALUE “Translation”, 0×0409 0×04B0
}
}
Save File.
Put the modified version of hacked LegitCheckControl.dll in Windows/System32 folder, replacing the original from Microsoft.

Beside, WGA Notifications tool is also reported to be able to be bypassed by emptying (deleting the contents of) the data.dat in C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data as detailed here.

If you disable Automatic Updates, you can always download any updates from Windows Update or Microsoft Update using the hacks and tips from here and here. If you are prompted to mandatory must install KB905474, the above tricks should disable the checking of existence of KB905474 notification application. Again, remember to deselect the Windows Genuine Advantage Notification (KB905474) which will listed in High Priority section and selected for you by default.

Update: The page has been updated as how to bypass and disable the WGA and how to make Windows genuine permanently.

Disclaimer: This article is for informational and educational purpose only, as most information is found on various part of Internet. Readers should contacts Microsoft if their licensed or OEM software cannot be validated or purchase genuine software.

How to Get More Out of Your Projector Lamp

If you are currently using a projector for viewing purposes or conveying information or images to a large group of people, you know how effective they can be under those circumstances. However, there are many things those projector users have to keep in mind when using, handling, and operating their projectors. One of the biggest concerns for most projector owners is the projector lamp. This is because the projector lamp, being the part of the projector that is essential in producing and transferring the imagery, is one of the most important aspects of your projector and its ability to do what is expected.

Signs of a Fading Projector Lamp
The other reason that projector lamps are often the biggest concern of projector owners is the fact that they are the one part of the projector that will eventually have to be replaced. This is because as the projector lamp begins to age, it may begin to suffer damage or normal wear and tear, which will lead to poor performance. Colors often begin to fade and the quality of the images or video signal that is transferred is lessened. The good news is that there are many different things that projector owners can do in order to extend the life of their projector lamps. Below, you will find some great tips that will allow you to get the most out of your projector lamps.

Treating the Projector With care
The first and most important thing that all projector owners should know when trying to get the most out of their projector lamps is how to properly handle their machine. The fact of the matter is, all projector owners – before operating their machine – should consult their owner’s manual in order to get the manufacturer’s recommendations for proper usage and handling of that specific model of projector. This is because different types of projectors will require different methods and precautions in order to safely operate them. However, there are a few things that apply to all projector owners when it comes to ensuring they do everything they can to get the most out of their projector lamps.

Wait Before Moving
The most important thing is to make sure you are not moving the projector while it is in use or still powered on or plugged in. This is because when the projector lamp is hot it is extremely fragile, and movement of the projector can cause damage to the projector lamp and lessen its life. It’s important to allow the projector lamp’s bulb an appropriate amount of time to cool, in order to avoid damaging the bulb. There is even the possibility that the bulb may burst if moved forcefully. The good news is that most projectors have features that allow you to safely let the bulb cool. For example, most projectors have fans that work to cool the bulb even if the machine is powered off. This is why you should leave the machine plugged in once it has been turned off, since that’s how the fan will get its power to cool the bulb. Another one of the biggest problems for projector owners is installing the replacement projector lamps and bulbs. The fact is that the process is quite easy but mishandling of the projector lamp during installation can damage the bulb and shorten its lifespan. The main threat to the life expectancy of the bulb is the oils that are naturally present in your skin. This is why you must avoid touching the glass portion of the bulb as much as you possibly can, as the oils on your skin will definitely cause its life to shorten.

Set the Projector to Economy Mode
Another thing that all projector owners can do in order to get the most out of their projector lamps is to make sure that they are operating their projector in economy mode. Most modern projectors have energy-saving features that will allow you to lessen the brightness reflected from the bulb. This will allow projector owners to extend the life of the projector lamps, as the bulb will not have as much stress on it. This will also produce images that are not as bright as they normally would be, however, if you are able to use this feature, it is one of the best things that you can do in order to extend the life of your projector lamps.