How to Remove Windows Genuine Advantage Notifications

Windows Genuine Advantage (WGA) notifications occur when your computer hasn't passed the validation test. The validation test can be failed due to being sold a pirated (non-genuine) copy of XP, or because you have changed your XP product key to a software-generated key, or sometimes it just happens for no reason at all. The failed validation installs three types of notifications on your computer: one on the log in screen, one log in timer, and one balloon. It also stops updates from Microsoft and disables your ability to install IE7 and Windows Media Player 11. This solution can get rid of all three notifications, even though you will still not be able to update through Windows Update. You will not be able to download things from Microsoft that requires a valid license either.


Delete Method
Step 1:If you have only just installed Windows Genuine Advantage notifications, simply using the system restore function will remove the program. Then refuse to accept the WGA update next time Windows updates. Otherwise, proceed as detailed below. (NOTE: If you try these steps while you are in "Safe Mode," step #8 is unnecessary).
Step 2:
First, try the following:
(1) Open a Command Prompt window by clicking on Start -> Run. Type CMD and press OK.
(2) Change Directory into the System32 Folder (type cd \windows\system32)
(3) Open a Notepad window and type the following lines:

taskkill -IM wgatray.exe
del wgatray.exe
del wgalogon.old

(4) Highlight and copy the three lines above to the Clipboard.
(5) Paste the contents of the Clipboard to Command Prompt.
Step 3:
This should kill the wgatray.exe process from the Taskbar and immediately delete both files wgatray.exe and wgalogon.dll without the need to to go through all steps bellow.

Note: If that does not work, follow the steps below (100% Works Guaranteed  by Writer  HBK Mano)

Step 4: (1) Open System32 by either of the following methods:
 Click "Start" -> "Run", then type "system32". Click "Okay".

 Click "Start" -> "Run", then type "system32".

Find system32 manually by clicking "Start" > "My Computer" > "(C:)" (or whatever your drive letter is) > "WINDOWS" > "system32".
(2) In "system32", go to "Tools" > "Folder options", click on the tab, "View", and uncheck "Hide extensions for known file types" if it is not already.
(3) Check to make sure the window that comes up has a full screen of various files. The files are in alphabetical order, which makes it easier to locate the specific file.
Find "WgaLogon.dll" and rename it "WgaLogon.dll.bak".

(4) Create an empty copy of WgaLogon.dll:
Right click on a blank space in system32 and select "New" > "Text Document".

Right click on a blank space in system32 and select "New" > "Text Document".

 Leave the text document empty and label it "WgaLogon.dll". Press Enter (on your keyboard).
You may get a warning from the above step that says, "If you change a file name extension, the file may become unusable. Are you sure you want to change it?". Click "Yes" on this warning.

You may get a warning from the above step that says, "If you change a file name extension, the file may become unusable.

(5) Be ready to complete the next two steps very quickly! Find "WgaTray.exe" in "system32" and delete it. You will then have 5 seconds to find "WgaTray.exe" in the Task Manager (the next step). NOTE: If you remove the files mentioned above while you are in "Safe Mode," step #8 is unnecessary.
Immediately open Task Manager. You can do this by pressing the Ctrl, Shift, and Esc keys simultaneously, pressing the Ctrl, Alt, and Delete keys simultaneously, or right clicking the Taskbar and selecting "Task Manager". Click on the process tab and click end process when "WgaTray.exe" is selected. Note: If you take longer, do not panic! All that will happen is that "WgaTray.exe" will keep reappearing in the processes list (i.e. you won't be able to delete it as required). To remove the notifications after this, return to system32. You will find two files:"WgaLogon.dll.bak" (the one you renamed) and an Application Extension (0KB) called "WgaLogon.dll". Delete the Application Extension, rename "WgaLogon.dll.bak" to "WgaLogon.dll" and repeat the steps from the fifth one onwards (at a greater speed!!).
Step 5: 
Restart your computer once you have finished. All the notification messages should be gone. 
Rename Method 
Step 1: Open a CMD window by clicking on Start -> Run -> type CMD and click OK.
Step 2:
Open a Notepad window (Start -> Run type NOTEPAD click OK) and type or copy (select the lines, and then press Ctrl-C) the following lines and paste (Ctrl-V) into the Notepad window:
CD %systemroot%\system32
rename wgatray.exe wgatray.exe.bak
rename wgalogon.old wgalogon.old.bak
rename LegitCheckControl.dll LegitCheckControl.dll.bak
taskkill /F /T /IM wgatray.exe
del wgatray.exe.bak
del wgalogon.old.bak
del LegitCheckControl.old.bak.
Step 3: 
Make sure there is a blank line at the end of the text document, right after the last line.
Step 4: 
Select all the text (Ctrl-A) and copy to the clipboard (Ctrl-C) 
Step 5:
 Paste the clipboard into the CMD Window (right click -> Paste)
Step 6: 
This should kill the wgatray.exe process and delete the files it uses.
Tips:
This process will only get rid of the notifications, and will not validate your copy of XP. It will remove the timer at the beginning of your XP log on, the white notice on the log on screen, and the annoying yellow star that appears in the bottom right corner of the screen.
This is easier to do if you have someone reading the steps to you while you do it.
You may need to Find Hidden Files and Folders in Windows to get to System32 manually.
If task manager processes are moving, click the title of the "image name" row to freeze them.
If you are having problems after this, disable the updates before rebooting.
There is a program called RemoveWGA which does all of this for you. Just run the program, click yes, and you're done. (See External Links, below.)
If you have problems changing files in the system32 directory, you will have to turn off System Restore. Go to "Start" -> "Control Panel" -> "System" -> "System Restore" and check the "Turn off system restore" check box.
You will not be able to use Automatic Updates anymore; instead, you have to manually update them. In External Links, there is a program that will allow you to update any system, regardless of if it is genuine or not.
You can also rename WgaTray.exe to WgaTray.exe.bak if you can't remove WgaTray.exe from your Taskbar. Press Ctrl+Shift+Escape to do so.
It will be useful to have Task Manager open first before deleting WgaTray.exe
Unlocker is a free program that can assist in removing WGA notifications.
  
For any Question : Tweet Me OR Ask me on Formspring !!!