| View previous topic :: View next topic |
| Author |
Message |
ggrobot
Elite Member
Joined: 28 May 2004
Posts: 45791
|
 Posted: Wed Apr 26, 2006 1:57 pm Post subject: TechNews Roundup- MS WGA Becomes Nagware [21454] |
 |
|
Intel G965 chipset to have DirectX 10 support? - The leaked slide lists both Shader Model 3.0 and 4.0 compatibility under the G965's specs, along with hardware Transform & Lighting, hardware clipping, 32-bit floating point precision, and anisotropic filtering up to 16 samples. VGA Coole
Read more...
Source: GGMania headlines
GGMania.com - Daily Gaming and Tech news |
|
| Back to top |
|
 |
devilhood
Elite Member
Joined: 09 Jun 2004
Posts: 698
Location: Cydonia
|
| Posted: Wed Apr 26, 2006 3:02 pm Post subject: |
|
|
dear lord, that WGA shit does nothing but SCREW up my system.
I don't even see a nag or window appearing, the whole f****** sh** just crashes.
Thanks Micro$oft, an update to authenticate a system that can't authenticate because the authenticating process doesn't even work.
Is there a way of uninstalling it? |
|
| Back to top |
|
|
devilhood
Elite Member
Joined: 09 Jun 2004
Posts: 698
Location: Cydonia
|
| Posted: Wed Apr 26, 2006 3:21 pm Post subject: |
|
|
It says:
This update cannot be removed.
Found the supposed uninstall info in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WgaNotify
The WgaNotify installs with NoRemove DWORD value in the registry at 1, preventing it from appearing in the Add/Remove programs list, but it doesn't actually have an uninstaller string, which would be in /WINDOWS/$NtUninstallKB905474$/ but seeing as that folder was never created, it cannot be uninstalled the conventional way.
I found the update.inf for it though, listing all the reg modifications and files copied across. |
|
| Back to top |
|
|
devilhood
Elite Member
Joined: 09 Jun 2004
Posts: 698
Location: Cydonia
|
| Posted: Wed Apr 26, 2006 4:00 pm Post subject: |
|
|
not sure if it left behind a class number, can't find it.
It installs these files though:
system32/LegitCheckControl.dll (an update for the original WGA Tool)
system32/WgaLogon.dll
system32/WgaTray.exe
system32/dllcache/WgaLogon.dll
system32/dllcache/WgaTray.exe
and acts as a direct hook for the winlogon.exe file itself.
I found this info in C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\update\
So to remove the whole thing, it probably would be an idea to delete the registries + all 5 files, making sure nothing is left behind, and then to re-install the old WGA Tool without the new notify update.
You can remove the hook from starting up using Autoruns by Sysinternals, browsing to the Winlogon tab.
If any of the files are locked to prevent deletion, just use a free program called Unlocker to remove it from the running processes.
Also, make sure you remove the WgaLogon key in HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
After that's done, do a reg sweep and delete all instances of WgaNotify in your reg.
Last edited by devilhood on Wed Apr 26, 2006 5:16 pm; edited 3 times in total |
|
| Back to top |
|
|
devilhood
Elite Member
Joined: 09 Jun 2004
Posts: 698
Location: Cydonia
|
| Posted: Wed Apr 26, 2006 4:09 pm Post subject: |
|
|
haha, at last we have an official trojan straight from the microhor$es mouth.
now all we have to do is wait for all the popular AV's to detect and auto-delete lol.
I'll let you know how I get on with removing the files. I hope M$ haven't done anything too clever and deep with it apart from hooking it to winlogon.exe |
|
| Back to top |
|
|
devilhood
Elite Member
Joined: 09 Jun 2004
Posts: 698
Location: Cydonia
|
| Posted: Wed Apr 26, 2006 5:07 pm Post subject: |
|
|
ok well, I removed all the info and everything seems a little better.
I still get an occasional hang on the logon screen after some restarts, so I am not entirely sure if it is WgaNotify or LegitCheckControl related, it might be a hardware issue that coincided with the update.
Quite bizarre though. |
|
| Back to top |
|
|
xxxx
Elite Member
Joined: 07 Jun 2004
Posts: 1755
Location: Canada
|
| Posted: Thu Apr 27, 2006 1:12 am Post subject: |
|
|
ironically you are the only one with the problem.. F@#$%ing MS? yeah... always easy to blame them  |
|
| Back to top |
|
|
devilhood
Elite Member
Joined: 09 Jun 2004
Posts: 698
Location: Cydonia
|
| Posted: Thu Apr 27, 2006 11:10 am Post subject: |
|
|
dude, this is perhaps the first time I have blamed M$ for anything 
It's not my fault their POS update made my installation unstable.
I'm extremely particular with what I install, and have had this XP running rock-steady since the 10th of 2004.
This is the first major error of any kind that I have personally experienced, and even though ironic, isolated cases can happen with software, because no one's hardware is exactly the same, and nor is anyones installation.
The update didn't seem to cause any issues on my laptop. I went to the WGA site on both computers and they both authenticated fine. |
|
| Back to top |
|
|
DELETED
Guest
|
| Posted: Thu Apr 27, 2006 12:24 pm Post subject: |
|
|
| DELETED |
|
| Back to top |
|
|
melhacker
Guest
|
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2666 phpBB Group
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
