Re: Windows Genuine Advantage Notification (KB905474)

October 8, 2008

Re: Windows Genuine Advantage Notification (KB905474)

WOAH, I beg to differ with you on this issue. Please read my reply in the WGA

Latest Info post to see what havoc it has caused and is continuing to ause on

my pc. I have a genuinee copy and it has been validated...the problems I am

edperienced are nothign less than spyare. I am unable to use my pc with this

update on it due to it's overtaking of my homepage with microsft URLs

(several), regardless of how many times I appy my homepage addy...it has

ballons every second on toolbar at bottom; tells me I am possibly infected

and need to download one of two MIcrosoft anti virus softwres to

rectify...there are continuous and huge screens blocking my work. I won;t go

into it all again but I am so mad I can't express it. None of the many fixes

have worked and I have rpeatedly tried them all. Yo can read about this allin

my post; I do not want to be redundant.

I am having morero problems than validtion issues...these are major

malicious pop ups that will not go away nor allow me to stop trying to remove

them for a second. C BIRDWISE. I am running ESET andd ran Nod 32 and did an

indepth etc etc etc I am not infected...I do not need Microsft's anti virus

software. I need to get ri of Microsoft's spyware....

"Carey Frisch [MVP]" wrote:

> Windows Genuine Advantage Notification (KB905474) does not cause

> any problems unless, of course, you happen to be using a non-genuine

> version of Windows. This particular update was not designed to be

> uninstalled.

>

> --

> Carey Frisch

> Microsoft MVP

> Windows - Shell/User

> Microsoft Community Newsgroups

> http://news://msnews.microsoft.com/

>

> -------------------------------------------------------------------------------------------

>

> "Larry Mauriello" wrote:

>

> | I have read this *update* causes problems. I marked it 'removed' in Windows

> | Update but It shows w/the Yellow(!)

> | saying I have chosen to Hide an Important update. Do I just ignore this or

> | install it?

> |

> | I alos for some reason have 2 'Programs' listed in Start/All Prgrams list.

> | 1 says Windows Update, the othe MS Update.

> | Properties are not the same yet both go to the same web site. I am guessing

> | it is ok to remove on. I mean they are just shortcuts

> | anyway, right?

>

October 8, 2008

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

"Cher (BIRDWISE)" <CherBIRDWISE@discussions.microsoft.com> сообщил/сообщила в новостях следующее: news:974188C8-23B3-497A-9ED5-B95034EC3BEB@microsoft.com...

> tells me I am possibly infected

> and need to download one of two MIcrosoft anti virus softwres

That's clearly not WGA but some malware. Visit some site which analyzes people's HijackThis logs and such.

For example, this one: http://virusinfo.info/forumdisplay.php?f=84

October 8, 2008

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

Hi!

> WOAH, I beg to differ with you on this issue.

You may differ as much as you like, but something is wrong with your

computer and it is *not* Microsoft that has done it.

Until recently, with Windows Live OneCare and Windows Defender, Microsoft

hasn't even been in the Anti-Virus and Anti-Spyware business.

You have a system that is in a mess, and clearly the two tools you are

trying to fix things just aren't up to the challenge. This does not

necessarily mean that they are bad tools. I suggest you research the

problems you have, along with the *exact* messages you get, and check to see

what the best course of action is.

William

October 8, 2008

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

Cher (BIRDWISE) wrote:

> WOAH, I beg to differ with you on this issue. Please read my reply in the

> WGA Latest Info post to see what havoc it has caused and is continuing to

> ause on my pc. I have a genuinee copy and it has been validated...the

> problems I am edperienced are nothign less than spyare. I am unable to use

> my pc with this update on it due to it's overtaking of my homepage with

> microsft URLs (several), regardless of how many times I appy my homepage

> addy...it has ballons every second on toolbar at bottom; tells me I am

> possibly infected and need to download one of two MIcrosoft anti virus

> softwres to rectify...there are continuous and huge screens blocking my

> work. I won;t go into it all again but I am so mad I can't express it.

> None of the many fixes have worked and I have rpeatedly tried them all. Yo

> can read about this allin my post; I do not want to be redundant.

> I am having morero problems than validtion issues...these are major

> malicious pop ups that will not go away nor allow me to stop trying to

> remove them for a second. C BIRDWISE. I am running ESET andd ran Nod 32

> and did an indepth etc etc etc I am not infected...I do not need

> Microsft's anti virus software. I need to get ri of Microsoft's

> spyware....

This has nothing to do with Microsoft. Your system is infected with a rogue

antivirus program. It is called "rogue" because it pretends to be A Good

Guy but is really Evil. Do not pay them!

Because you didn't give me the name of the program that is trying to get you

to buy it, I can't point you to specific removal steps. Look for them here:

Bleeping Computer removal how-to's -

http://www.bleepingcomputer.com/forums/forum55.html

If the rogue is XP Antivirus 2008/09, here are removal steps:

http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009

http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions)

These may work for you and all may be well. However, in many cases the

computer will also be infected with Zlob and/or Vundo trojans and protected

by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the

specialty forums below OR back up your data and do a clean install of

Windows. It is your choice. If you are unsure how to back up your data or

how to do a clean install, you can take your machine to a local computer

professional. I don't recommend using BigComputerStore/GeekSquad types of

places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and

the stickies *first*.

http://www.atribune.org/forums/index.php?showforum=9

http://aumha.net/viewforum.php?f=30

http://www.bleepingcomputer.com/forums/forum22.html

http://www.dslreports.com/forum/cleanup

http://www.cybertechhelp.com/forums/forumdisplay.php?f=25

http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html

http://www.malwarebytes.org/forums/index.php?showforum=7

http://gladiator-antivirus.com/forum/index.php?showforum=170

http://spywarewarrior.com/viewforum.php?f=5

http://forums.techguy.org/54-security/

http://forums.tomcoyote.org/

http://www.thespykiller.co.uk/index.php?board=3.0

http://forums.subratam.org/index.php?showforum=7

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

October 8, 2008

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

I'm with Malke: You've got a hijackware infection, my dear, and it has

nothing to do with installing KB905474.

Any of the below look familiar?...

Rogue Antivirus - A Closer Look at Win32/Antivirusxp

http://blogs.technet.com/mmpc/archive/2008/10/02/rogue-antivirus-a-closer-look-at-win32-antivirusxp.aspx

Anatomy of a malware scam

http://www.theregister.co.uk/2008/08/22/anatomy_of_a_hack/print.html

--

~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

AumHa VSOP & Admin http://aumha.net

DTS-L http://dts-l.net/