Error message
you may be a victim of software counterfeiting, this copy of windows did not pass genuine windows validation.
Causes
windows\system32\WgaLogon.dll
windows\system32\WgaTray.exe
windows\system32\LegitCheckControl.dll
Steps to perform
1) Start windows in safe mode.
2) Open command prompt (start->run->cmd)
3) delete file LegitCheckControl.dll. Command is "del LegitCheckControl.dll /F"
4) change properties of WgaLogon.dll.
The wgatray.exe process makes the check for genuine windows software. You can disable WGA by removing the execute bit on WgaLogon.dll. That way, winlogon can't call it as a notification package at boot, and since WgaLogon is responsible for running and maintaining WgaTray.exe, no more tray popups either.
To change the execute bit of WgaLogon.dll, first turn off Simple File Sharing. Now right click the file in Windows Explorer and open the Security Tab. Hit the Advanced button, uncheck the Inherit box at the bottom, hit the Copy button, then hit OK. Go through each listed user/group and remove the "Read & Execute" permission for that file, leaving the "Read" permission as-is.
Hit OK to apply the permission changes and close the file properties dialog. Restart the machine. You can now turn "Use simple file sharing" back on, if you want.
Note: Sometimes no need to worry about "Use simple file sharing". Without turning off simple file sharing
5) Restart pc in safe mode.
6) delete files WgaLogon.dll and WgaTray.exe
Commands are as follows:
delete WgaLogon.dll /F
delete WgaTray.exe /F
7) Now start pc in normal mode
ITS DONE! :)
