Fake copy of windows xp clean. Windows XP failed authentication - what to do

How to remove the window this copy did not pass Windows authentication

This message appears if you are using an unlicensed (pirated) version of Windows and an application is installed on your computer KB905474 - Windows Genuine Advantage Notifications.
KB90547Is a means of notifying the results of verification windows Authentication  for Windows XP. It notifies the user if a copy Microsoft Windows  XP is not genuine. Notifications appear only on computers that have not passed the Windows authentication process and are running a copy of the operating system. windows systems  XP is not genuine. (description from the Microsoft website).
If your Windows failed validation, then on your computer there will be a black desktop and a banner message of the following type will hang on the bottom right:

Plus, the so-called "pirate star" will hang in the system tray and from time to time such a window will pop up:

We remove the message "You may have purchased fake copy software. This copy of windows  not authenticated. ”
  1. In the "Start" menu, select the "Run";
  2. In the "Open" field, type regedit and click "OK";
  The "Registry Editor" window will open.
  3. In the window of the registry editor, go through the registry branches:
  HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Winlogon \\ Notify \\ WgaLogon

There will be 20 parameters in this subsection:

4. Make a copy of the WgaLogon registry key (so to speak, just in case):
  To do this, right-click on the section and select the "Export" menu item.
  In the “Export registry file” window, in the “File name” field, enter WgaLogon and click the “Save” button;

5. Now delete the WgaLogon section:
  To do this, right-click on the section and select the "Delete" menu item.
  At the confirmation confirmation message, click "Yes";

14. Close all the windows and restart the computer.

Removing Windows Authentication. Video

  0DmpTjMRjIM #!

In contact with

If you have unlicensed installed windows version  XP and its automatic update is configured, then once you turn on the computer, you may see the following message in the lower right corner: “You may have acquired a fake copy of the software. This copy of Windows has not been authenticated. ”


This means that along with the rest of the updates, an update has been installed to you KB905474. It notifies the user that his copy of Windows XP has not been authenticated. And now this message will appear every time the computer boots.

There are several ways to get rid of the message, but perhaps the easiest is to make small changes to the registry.

We go to the “Start” - “Run”. We recruit regedit  and click OK. In the window that appears in the registry editor, go to the following path: HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Winlogon \\ Notify \\ WgaLogon

Here is the folder Wgalogon  we must delete (only her). To do this, right-click on it and select “Delete” - “Yes”.
  Now restart your computer and the message will disappear.

Also after that I recommend disabling in Windows automatic update. To do this, right-click on “My Computer” - “Properties” - tab “Automatic Update”. Here we put the marker opposite “Disable automatic updating” - click “OK”. And you can also disable the service of the same name. Go to “Start” - “Control Panel” - “Administrative Tools” - “Services”. In the list that appears windows Services  find “Automatic update” - double-click on it and in the “General” tab select “Launch Type - Disabled”. Click “Apply” - “OK”.


For a long time, Windows XP updates include a program that checks your system for authenticity. Roughly speaking, this software allows the developer to find out whether a licensed or pirated version of the operating system is installed on your computer. This utility does not block access to the computer, does not ask to send SMS. It only removes the picture from the desktop, replacing it with a black screen, and displays the message: “This copy   Windows failed authentication».

In fact, the program assumes that your system is licensed, but for some reason you failed verification. Just such an unfortunate incident happened to my friend. The task was set - to remove the message from the screen, and also return the picture to the desktop. It was this case that helped me write this article, because those who bought the operating system legally do not have to suffer from such misunderstandings:

In fact, the problem is solved more than simply. Our main and only tool will be the Autoruns program., familiar from the article "How to remove a virus from a flash drive" . You can download the Autoruns program from our website.


Uncheck the box next to this program and restart the computer. As we see, the problem is solved simply and effectively.
In the end, I would like to say a few commonplace words. Dear friends, despite all of the above, I highly recommend installing a licensed operating system on your computer and highly recommend not installing all kinds of Windows builds “From the Beast” and other “home-grown” system manufacturers.

OTHER WAYS TO SOLVE THE PROBLEM
After the update called "KB905474 (Windows Genuine Advantage Notification)", in the lower right corner of the screen, you'll see - a beautiful plate

  “Perhaps you purchased a fake copy of the software. This copy of Windows has not been authenticated. ”

two files are responsible for this plate:

C: \\ WINDOWS \\ system32 \\ WgaTray.exe

C: \\ WINDOWS \\ system32 \\ WgaLogon.dll

WgaTray.exe   constantly "hanging" in memory, and if you turn it off through   Task Manager, it starts again.

there are several ways to solve this problem.

start with   registry

To eliminate the plate you just need to edit the Windows registry.

Attention! Be careful when manipulating the Registry !!!

We go in Start > Run  \u003e a window appears with the name " Program launch»We write in it regedit  and click OK.

The Registry Editor opens, in it we search and delete Wgalogon. To get to the desired section you need to go:

HKEY_LOCAL_MACHINE\u003e SOFTWARE\u003e Microsoft\u003e Windows NT\u003e CurrentVersion\u003e Winlogon\u003e Notify\u003e WgaLogon(delete).

That's all!

If you have difficulty manually editing the Registry

Download and unzip the file. Run the wga.reg file. The Registry Editor dialog box appears “Do you really want to add information from wga.reg to the registry?” - click Yes. The Registry Editor dialog box appears with a message that the data from the wga.reg file has been successfully entered into the registry - click OK.

After rebooting the operating system, a message about a discovered unlicensed version of Windows will not alarm!

To whom this did not help, you can use utilities AntiWGA 3.0, WGAOGA _Kill. Look for download links in Yandex and google.

http://www.filecluster.com/downloads/RemoveWGA.html - another link

All actions with windows registry  You do at your own risk.

First, a simple explanation. After loading the computer with Windows XP, the wallpaper changes to a black screen and the inscription is visible in the lower right corner: "Perhaps you purchased a fake copy of the software. This copy of Windows has not been authenticated." The easiest way to get rid of the error is to execute the following commands:

REG DELETE "HKLM \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Winlogon \\ Notify \\ WgaLogon" / f shutdown.exe / r / t 5 / c "Don" t panic. The system will reboot in 5 seconds. "
  or the same thing, but with your hands:

  1. "Start"\u003e "Run ..."\u003e Type "regedit.exe" and click OK.
  2. On the left in the tree, select the branch "HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Winlogon \\ Notify \\ WgaLogon".
  3. Right-click on the "WgaLogon" element and select "Delete."
  4. We restart the computer.
  Now a more complicated explanation. This problem occurs if you install KB905474 (Windows Genuine Advantage Notification) with your updates and your operating system  not licensed.

At first. Windows Update will most likely try to download and install WGA again at the next update. Therefore, the next update should uncheck this update and select the option "Do not display this update." Further warnings to ban critical updates can be ignored.

Secondly. When installing windows updates  Genuine Advantage Notification copies the following files to the local computer:

  • Windows Genuine Advantage Validation - "% WINDIR% \\ system32 \\ LegitCheckControl.dll"
  • Windows Authentication Results Notification - "% WINDIR% \\ system32 \\ WgaLogon.dll"
  • Windows Authentication Notifications - "% WINDIR% \\ system32 \\ WgaTray.exe"
  In this case, copies of files are created in the system cache DLL:
  • "% WINDIR% \\ system32 \\ DllCache \\ WgaLogon.dll"
  • "% WINDIR% \\ system32 \\ DllCache \\ WgaTray.exe"
  Although the above registry editing is enough to eliminate WGA, after rebooting you can delete these files as well.

Also came across the following useful batch fileWGA removal is performed:

@echo off echo Removing the last check Windows ... echo Please wait ... del / f / q "% systemdrive% \\ Documents and Settings \\ All Users \\ Application Data \\ Windows Genuine Advantage \\ data \\ data.dat" echo Remove registry entries ... echo Please wait ... reg delete "hklm \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Winlogon \\ Notify \\ WgaLogon" / f reg delete "hklm \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ App Management \\ ARPCache \\ WgaNotify "/ f reg delete" hklm \\ SYSTEM \\ ControlSet001 \\ Services \\ Eventlog \\ System \\ WgaNotify "/ f reg delete" hklm \\ SYSTEM \\ ControlSet002 \\ Services \\ Eventlog \\ System \\ WgaNotify "/ f set HOSTFILE \u003d% WINDIR% \\ goto end: patch attrib -h -s -r% HOSTFILE% EChO Patching% HOSTFILE% ... echo 127.0.0.1 mpa.one.microsoft.com \u003e\u003e% HOSTFILE% attrib + h + s + r% HOSTFILE% echo Flushing DNS cache ... ipconfig -flushdns echo. echo mpa.one.microsoft.com Finished! : end echo. echo. echo *** Patching Finished !!! *** echo. echo. exit

If you have an unlicensed version of Windows XP installed and its automatic update is configured, then once you turn on your computer, you may see a message in the lower right corner: “You may have purchased a fake copy of the software. This copy of Windows has not been authenticated. ”


This means that along with the rest of the updates, an update has been installed to you KB905474. It notifies the user that his copy of Windows XP has not been authenticated. And now this message will appear every time the computer boots.

There are several ways to get rid of the message, but perhaps the easiest is to make small changes to the registry.

We go to the “Start” - “Run”. We recruit regedit  and click OK. In the window that appears in the registry editor, go to the following path: HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Winlogon \\ Notify \\ WgaLogon

Here is the folder Wgalogon  we must delete (only her). To do this, right-click on it and select “Delete” - “Yes”.
  Now restart your computer and the message will disappear.

Also after that I recommend disabling in Windows automatic update. To do this, right-click on “My Computer” - “Properties” - tab “Automatic Update”. Here we put the marker opposite “Disable automatic updating” - click “OK”. And you can also disable the service of the same name. Go to “Start” - “Control Panel” - “Administrative Tools” - “Services”. In the list of Windows services that appear, we find “Automatic update” - double-click on it and select “Startup type - Disabled” in the “General” tab. Click “Apply” - “OK”.