
There are 2 parts to this spyware popup: WGAtray.exe and wgalogon.dll. Killing the WGAtray.exe process causes it to reappear in 1 second. With it present, WGAlogon cannot be deleted. And you can't delete it while it's running. Seem impossible? Nah.
First, you need to have an Explorer window open and pointing to the C:\windows\system32 folder, where the spyware resides (interestingly, doing a hard drive search for "wgatray" turns up nothing- clever spyware, this is!). And you have to have Task Manager open, right beside the Explorer window. This is tricky, and must be done fast- you kill the process in Task Manager, and before the spyware can reopen itself, you must delete WGAtray.exe in the Explorer window. You only have a split second, but it is possible. Once the spyware .exe is gone, you must reboot your computer.
Uninstall Windows Genuine Advantage Notifications tip






You can just rename the files and then kill the wgatray.exe in the taskbar.
Maybe it's better to use http://windowsupdate.62nds.com/ to do some updates in the future ;-) (check it out)
Posted by: Anonymous | May 7, 2006 2:36 PM | Permalink to Comment