From: Randy 

When the Second EULA came up for WGA in Windows Update, I said NO and went
on my merry way-got all my updates sans WGA.

> http://www.theinquirer.net/?article=31281
>
> Letters to Editor column...
>
> ===
> Man, I couldn't believe it was Microsoft who finally got my system
> infested with spyware! An unkillable process? Popup windows? A prompt
> you have to click at logon? My GOD!!! But it's ok. You CAN get rid of
> it:
>
> There are 2 parts to this spyware popup: WGAtray.exe and wgalogon.dll.
> Killing the WGAtray.exe process causes it to reappear in 1 second. With
> it present, WGAlogon cannot be deleted. And you can't delete it while
> it's running. Seem impossible? Nah.
>
> First, you need to have an Explorer window open and pointing to the
> C:\windows\system32 folder, where the spyware resides (interestingly,
> doing a hard drive search for "wgatray" turns up nothing- clever
> spyware, this is!). And you have to have Task Manager open, right beside
> the Explorer window. This is tricky, and must be done fast- you kill the
> process in Task Manager, and before the spyware can reopen itself, you
> must delete WGAtray.exe in the Explorer window. You only have a split
> second, but it is possible. Once the spyware .exe is gone, you must
> reboot your computer.
>
> Yes, now you will see the spyware's nag screen. No problem, it's the
> last time. When you DO finally get to the desktop, do a search "for
> WGAlogon.dll" You will find 2 copies, one in system32 and one in the
> dllcache folder. Without the WGAtray spyware to protect them (did you
> notice it was gone? YAY!), you can rename and then delete both these
> spyware .dll's. Your system may hang when you reboot it the first time,
> but when it is brought back up, THE SPYWARE IS ALL GONE.
>
> Whew. Man, I may have to stop using Windows Update. It installs spyware!
> I'm afraid of these malware writers coming after me for defeating their
> product, so I can't provide my real email. But feel free to share this
> malware removal process with the world.
>
> -Kevin
>
>
>
> Microsoft piracy pop-up is persistent
>
> From the Knowledge Base website:
>
> "How to uninstall Windows Genuine Advantage Notifications You can use
> Add or Remove Programs to view Windows Genuine Advantage Notifications,
> but you cannot use Add or Remove Programs to remove the notifications."
>
> So... an unwanted programme that can not be uninstalled normally? Isn't
> this considered Spyware? From Microsoft?
>
> My head as just exploded.
>
> Jouki...
> ===
>
>  /m

--- BBBS/NT v4.01 Flag-5