Comments on: New Virus Poses As Windows Genuine Advantage http://cybernetnews.com/new-virus-poses-as-windows-genuine-advantage/ Technology News Mon, 23 Nov 2009 16:18:25 -0600 http://wordpress.org/?v=2.8.6 hourly 1 By: ICARVZ http://cybernetnews.com/new-virus-poses-as-windows-genuine-advantage/comment-page-1/#comment-147694 ICARVZ Sat, 02 May 2009 12:40:31 +0000 http://tech.cybernetnews.com/2006/07/13/new-virus-poses-as-windows-genuine-advantage/#comment-147694 if you have the windows genuine advantage notification window appearing everytime you logon, you may have the same virus I did, removal notes below.... 1. boot in safe mode, open c:/windows/regedit.exe and search for wgalogon - when found delete the folder and all keys within 2. search c:\windows for wga*.* and delete everything you find, if you cant delete something reboot in safe mode and then try and delete again. 3. final search of c:/windows for any re-appearing wga*.* files - and final search of registry to make sure wgalogon has not reappeared 4. boot as normal if you have the windows genuine advantage notification window appearing everytime you logon, you may have the same virus I did, removal notes below….

1. boot in safe mode, open c:/windows/regedit.exe and search for wgalogon – when found delete the folder and all keys within

2. search c:\windows for wga*.* and delete everything you find, if you cant delete something reboot in safe mode and then try and delete again.

3. final search of c:/windows for any re-appearing wga*.* files – and final search of registry to make sure wgalogon has not reappeared

4. boot as normal

]]>