This copy of Windows is not genuine – how to fix


Microsoft, in a rather brilliant move, has released an update that checks your OS serial against a list of known leaked serials (corporate edition keys, etc). If your serial matches one of them then it puts a darling little message on the bottom right hand of your login screen, and also a system tray icon that nags you to buy a genuine copy of windows.

It will also pop up a dialog that says “This copy of Windows is not Genuine
“This copy of Windows is not genuine and you have not yet resolved this issue. This computer is no longer eligible to recieve select security upgrades from Microsoft.

To protect your copy of Windows, you must click Get Genuine now.”

Every so often a little balloon will pop up that says “You may be a victim of software counterfeiting.” Below that it will say “This copy of Windows is not genuine. Click this balloon to resolve now.” If you’re working on a system that has this running it gets annoying in a hurry. What the time interval between pop-ups is, I don’t know, but I imagine it’ll drive most people to buy a legit key after a while just to get the thing to shut up.

Fixing the popup is easy enough.

Reboot to safe mode. Open up HijackThis and scroll down to the selection that says “020 – Winlogon Nofity: Wgalogon – …” select that, and click fix checked.

You can also go and delete the actual executable that nags you. The full path to it should be (for most installs) C:\Windows\System32\wgatray.exe.

Reboot after this. No longer should you get the popups and that nagger as you log in should not show up either.

Instructions for Windows 7

The easiest way to fix the issue in Windows 7 is to use the ChewWGA tool that I’ve located. You can download it from here: http://Chew7.co.cc/UPDATE:  Looks like that site is down now. For the time being, you’ll just have to search for it unfortunately.

ChewWGA v0.9 "Windows Not Genuine" Fix for Windows 7

Close all the apps that you have open, run the program, and then click “Apply”. One virus scanner incorrectly identifies it as some kind of virus because of the compression that it uses, but I’ve tested it on 3 different machines (including my main Windows 7 Ultimate test machine) and it is clean.

Note: I am NOT condoning software piracy! If you have jacked your copy of Windows then it’s time to buy one!

Popularity: 100% [?]

100 Comments

  1. Tony says:

    Kishore Singh Rana:

    It works.

    Aaron, thanks! I did a mix of deleting&renaming, so deleted WgaTray.exe and the H_KEY_LOCAL_MACHINE/SOFTWARE/MICROSOFT/WINDOWS NT/CURRENT VERSION/WINLOGON/NOTIFY and renamed WgaLogon.dll and…Bob is your uncle :-)

  2. Serge Boucher says:

    I deleted wgalogon.exe & wgalogon.dll, backed up the registry & search for any occurence of wgalogon.dll & deleted them all.

    restarted it was ok, mthe message was gone.

    btw. That was a registered licence

  3. Rob says:

    Thanks for posting this. I do have a legit copy and I’m still pestered by this annoying popup, so I’m anxious to try this fix.

  4. Dave says:

    The best way to get around this is to install Linux. Grab a copy of ubuntu from http://ubuntu.com

    I run Vista in a virtual machine in order to connect RAS into work. I have nothing but trouble with Vista. Even using Microsoft’s own copy of Vista from my MSDN subscription, WGA will pop up and then shut down Windows. I usually have to go into my MSDN subscription and request a new key in order to fix it. This is MS’s “fix” for the problem. I’d have a fit if I actually paid for a Windows OS and then couldn’t use it.

    I may have to write code on Windows at work but I love coming home and using Linux. Everything just works and it works a whole lot faster, with a lot more features and it’s all free!

  5. raoexcellent says:

    MadBadie!!!!!!!!!
    You are realy a King.

  6. JMz says:

    well .. change to safemode first den go to C:/windows/system32/ .. search for wgalogon and wga.. delete off or change their extension name like exe1 or dll1 as the top mention…

  7. hammy says:

    I think i have the pirated Vista Ultimate and i am unable to find the executable file C:\Windows\System32\wgatray.exe
    so suggest me how to resolve this nag???????

  8. Walter says:

    I have a Acer Laptop and something got screwed up and i went and got it fixed. the guy had to delete everything on my harddrive and including windows vista. well he reinstalled it but the damn sticker on the bottom of the laptop was worn off so he couldnt enter a product key. now my laptop is locked up it says to buy a copy of windows. which sucks because i dont want to spend 90 dollors. is there anything else possible?

  9. Paula says:

    Kishore Singh Rana:
    It worked! Thank you much. Will I still get updates?

  10. slim says:

    it would not let me delete the wga.exe in the system 32 folder buy i renamed the exe and dll to xxx (what ever you want) marked as read only and it never came back up. But i still ahve the black back ground. If neither works take the drive out put it in an external case and delete from anotehr machine

  11. Kunal says:

    Well guys…there’s a very easy way to get rid of this stubborn darn popup message….here’s how you can do this!!!

    After installing your genuine copy of Microsoft Windows XP you are prompted with a “Your software is counterfeit” error message at startup. Even after visiting the http://www.microsoft.com/genuine/ site and validating, you still get the above message popping up after 2 or 3 boots. There is an easy solution to this and I would like you to follow the steps below to fix the issue.

    1. C:\Windows\Downloaded Program Files

    Within that folder, remove any files or folders associated with .WGA
    2. Safe Mode

    Reboot your computer and as soon as Windows logs off, start repeatively tapping the F8 Key on your keyboard.
    As soon as you see the Windows Advanced Startup options select Safe Mode within Safe Mode get yourself into these folders…
    C:\Windows\System32 (Rename wgatray.exe to wgatrayold.exe)
    C:\Windows\System32\dllcache (Rename wgatray.exe to wgatrayold.exe)
    Note: Dllcache is a hidden folder, to view hidden folders do the following, go to Start, Control Panel, Folder Options,
    Select the view Tab and under the Hidden Files option, select Show hidden files and folders
    3. Safe Mode Registry

    Click on Start, Run and within the open dialog box type regedit and click OK.
    Within the Registry Editor navigate your self to
    HKEY_Local_Machine\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\Notify\WGALOGON
    Right Click and Export the WGALOGON Folder (this should be saved onto your machine for backup purposes)
    After Exporting the folder, DELETE the WGALOGON folder
    After deleting close all applications and Restart your machine back to Normal Mode
    4. http://www.microsoft.com/genuine

    Get into the site above and manually re-validate your copy of Windows.
    After being prompt of a successful validation, Restart your Machine.

    Hope after getting this done, you will enjoy your PC as before!!

    If this works for you, a small “Thank You” is greatly appreciated…hehe!!! ENJOY!!

  12. Stevo says:

    I have a 3-4 year old Dell Dimension 9100. I bought directly from Dell and am suddenly getting this message. In addition, my computer won’t boot, even in Safe Mode. Does anyone have any suggestions? I think I’m in trouble.

  13. Sandyk13 says:

    I am having the same problem when loging into MS office (This copy of Microsoft Office is not genuine) does anyone have a fix for this.
    Thank you

  14. Nemanja says:

    OMG that thing with renaming those >>>

    1. WgaTray.exe
    rename it as WgaTray.exe1
    2. WgaLogon.dll
    rename it as Wgalogon.dll1

    Path: C:\Windows\System32\and then press “w” to find these files.

    >>> realy worked !!!
    Just rename these and it’s done … ur problem is over !!! :)))

  15. Paulie says:

    Macbarbie – thanxs….

    still not genuine displayed when office programs open.. can you rid this too?

  16. Justin says:

    just so you all know even if you do have the wgatray microsoft HAS to update your system. All it does is turn off your auto updates. just turn them back on. It poses to much of a risk to have that many machines out of updates it makes their whole structure at risk.

  17. pinayako says:

    kishore tnx ur genius…simple steps but really work…

  18. May Khin says:

    Hello,

    My dad bought this acer laptop with microsoft vista 2 years ago. Now all of a sudden, in my hands(he gave it to me in april 2009 now its may 2009) I am receiving this message saying it’s not genuine.

    My problem here is, I tried to resovle through computer – properties – activate windows … what I’m getting is three choices – enter new product key, purchase key, ask microsoft for help.

    I entered a product key which is on a sticker underneath the laptop. They say it’s wrong.

    Now the REAL problem is it is telling me to activate my WINDOWS VISTA ULTIMATE yet the sticker underneath says WINDOWS VISTA HOME PREMIUM.

    My dad’s away on a trip so I cannot reach him. can anyone simply help me? I don’t find any CDs in the laptop case also =/

  19. Rob says:

    Hey May,

    I have a Dell Dimension desktop bought directly from Dell exactly 2 years ago when I started getting the same problem.

    Anybody know why and how this problem is popping up? Has Microsoft put a time limit on how long you can use there OS before upgrading?

  20. Sil says:

    For anyone using Vista with this problem of “This version of Windows is not genuine,” and nagscreens saying “Activate Windows now,” check out this tutorial. It’s a Vista Forum, with all kinds of solutions for Vista.

    http://www.vistax64.com/tutorials/84488-activate-vista-phone.html

    I had the nagscreen for a week and all I did was change the product key, restarted my computer and voila, good as new!

  21. Jay Gee says:

    Thanks guys! I havnt payed microsoft a cent in over a decade now. As if you would

  22. Sharon says:

    i got my computer clean because it had a virus from a omputer expert when it return to me it was working very well till i update this thing pop up tell that window is the genuine.Bought the genuine package and can not get it to work. what am doing wrong

  23. huyen giang says:

    I thought this software is free of charge, but after installed and scaned, they asked me to pay by visa before I can delete the infected files.. hmm !

  24. Sootah says:

    @Huyen Giang – What software are you talking about? HijackThis IS free, and can be downloaded from a number of places. Windows itself, however, is NOT free and their WGA software will attempt to make you purchase a new valid key.

    There are plenty of fake virus and spyware scanners out there that will tell you that they’ve detected items on your computer and then attempt to make you purchase their software in order to remove these ‘infections’ when the “scanner” itself really is a virus.

    There are also many legit free online scanners available that will only scan your computer and tell you where the virus source files are, but will make you pay to remove them.

    The Windows Live OneCare scanner is one of the only online scanners I’ve found that will actually detect and remove infections for free.

    You can also use McAfee’s ,SuperDAT command line scanner for free as well, although if you don’t know how to work a command prompt then you won’t be able to use it. Fortunately, I’ve written a how-to for it here.

  25. o.O says:

    >._< I login today and it tells me its am a victim of counterfeiting..thats total BS anywho if anyone can help me please let me know.

    P.S.
    o.o Am going try that thing on top that uhh..that computer repair guy said.

  26. Piya says:

    guys i install by mistak a genius software..but it is not validate..and for validate it costs is 6000 $ and don’t want to purchase it…i want to remove it how to remove.the genius sofware..or it will fix without buy it..tell me how i do this…plz…

  27. Vanessa says:

    Hey everyone…what you all are describing sounds like what happened to me.
    I logged on to a wireless network that wasn’t legit I think and the next time I turned on my comp I got the windows is not genuine message. I think that someone got to my computer through the faulty wireless network.
    The only thing I’m wondering now is what to do about it…
    If anyone knows could you email me? vfa1986@gmail.com

    Thanks!

  28. pissed off says:

    i’ve had the genuine version of windows, but my computer got a million viruses so i had to get it fixed, and when i got it back, everything had been taken off of it so i had to re-install windows (the same key as before). it worked, but after about a month, maybe two, it gave me this message saying my version of windows isnt genuine, well it is, cos i have the disc right here. but no. it keeps nagging me. and now it wont let me have any backgrounds, but instead replaces anything with a little message at the bottom of the screen saying this copy of windows isnt genuine.

    any help? please???

  29. harmony rose says:

    I would be so seriously pissed if I had bought a bogus copy of windows.

  30. Mr. Franco says:

    I bought an Asus computer laptop in Best Buy on December 26 2009 and I picked up next day. One day later I see the message you already know. I searched the file C:\Windows\System32\wgatray.exe
    but nothing I don’t have that file, then I scanned my computer with Panda Antivirus and have no results. What the hell can be the answer. Well this IS THE SOLUTION is simnple and fast I JUST MAKE A RESTORE POINT TO A DAY BACK AND WORKS. I hope works for Windows XP or Windows Vista
    Note: I have Windows 7. Comments to sir_franco83@hotmail.com

  31. Gary Greene says:

    I purchase a legal copy of Office through my company at a reduced rate. Now I have this error message not geninue. What can I do to get this correct without spending more money.

    Commet to Garygreene@windstream.net

  32. marco says:

    Sir, thank you very much!! I have windows 7. I used that little program as you indicated and the black screen saying “this copy of windows is not genuine” completely went away. I didn’t even use Safe Mode. Problem solved. Thanks again

  33. Phil49 says:

    I have been trying your tips on wga file removal for Win Vista but i have Windows 7 Ultimate and i can’t find the wganotification file or the link in the registry.

    Is it under a different name in Win7? Or is it hidden somehow? Because I can’t even find the prosses in the task manager.

    I’ve tried all of the differant tips on your site to no avail please help if you can i’m tired of resetting my desktop and getting interupted playing bbc2 and such.

    Thank you very much!

    Phil49

  34. Sootah says:

    Phillip,

    The easiest way to fix the issue in Windows 7 is to use the ChewWGA tool that I’ve located. You can download it from here: http://Chew7.co.cc/

    ChewWGA v0.9 "Windows Not Genuine" Fix for Windows 7

    Close all the apps that you have open, run the program, and then click “Apply”. One virus scanner incorrectly identifies it as some kind of virus because of the compression that it uses, but I’ve tested it on 3 different machines (including my main Windows 7 Ultimate test machine) and it is clean.

    -TweaksForGeeks Support

  35. Sootah says:

    As always, this should ONLY be used to fix issues where your copy of Windows is incorrectly identified as not genuine. It should NOT be used to pirate Windows.

    -TweaksForGeeks Support

  36. Phil49 says:

    FINALLY!! I reimaged my Toshiba Satellite L450 laptop a couple of weeks ago and after allowing the automatic updates Windows 7 suddenly tells me that it is not genuine. HOW CAN THIS BE IF WINDOWS 7 CAME WITH THE LAPTOP!?

    Anyway you have fixed the problem with the link to the tool. Thank you!!!!!!

  37. Colin says:

    Thank you soooooo much!!! Chew WGA works like a charm on Windows 7. (I have tried EVERYTHING else)
    You all are geniuses!

  38. Dallen says:

    I’ve had this problem with Windows 7 for a couple months now and Chew7 is the FIRST tool that actually fixed it.

    THANK YOU FOR YOUR INSTRUCTIONS ON HOW TO FIX THIS GENUINE W7 PROBLEM!!

    -Dallen

  39. redski says:

    I think Microsoft screwed up by giving resellers subscription copies instead of retail ones and now want to hold a flame under the little guys feet to buy new ones by deactivating your key.
    Why do I think this?
    I was on the phone yesterday with Microsofts activatiion department trying to find a solution to me not being able to reactivate my copy as they deactivated it.
    They tell me my copy was never intended for sale to the public as it was part of a subscription.
    I ask if I bought another copy from newegg or amazon.com would I be safe from this crap happening again?
    They tell me newegg and amazon have sold some of these subscription copies as well.

    I simply find that hard to believe when both newegg and amazon.com buy from MICROSHAFT directly and I checked all the feedback on newegg and not persone say’s they have been subjected to the “your copy of windows is not genuine” crap.

  40. redski says:

    Oh, “CHEW WORKED”, lol.
    I guess I’ll find out if win 7 will stay running in a couple more weeks?

  41. Al says:

    The best way is to just simply format and turn of updates. There you go, problem solved. The site said geeks, i presumed that meant everyone has back up hardrives or nas drives. Also that crack, is not at all clean. Run it with any descent Av or malware and you’ll find trackers, Trojan’s and keylog’s. Anyway, there’s my advice. Discuss……

  42. Terry says:

    Thanks, very useful

  43. Rawr says:

    UHm…..Guys the link dont work it says
    HTTP Error 500 Internal server error

    Introduction

    The Web server (running the Web Site) encountered an unexpected condition that prevented it from fulfilling the request by the client (e.g. your Web browser or our CheckUpDown robot) for access to the requested URL.

    This is a ‘catch-all’ error generated by the Web server. Basically something has gone wrong, but the server can not be more specific about the error condition in its response to the client. In addition to the 500 error notified back to the client, the Web server should generate some kind of internal error log which gives more details of what went wrong. It is up to the operators of the Web server site to locate and analyse these logs.

    500 errors in the HTTP cycle

    Any client (e.g. your Web browser or our CheckUpDown robot) goes through the following cycle when it communicates with the Web server:

    Obtain an IP address from the IP name of the site (the site URL without the leading ‘http://’). This lookup (conversion of IP name to IP address) is provided by domain name servers (DNSs).
    Open an IP socket connection to that IP address.
    Write an HTTP data stream through that socket.
    Receive an HTTP data stream back from the Web server in response. This data stream contains status codes whose values are determined by the HTTP protocol. Parse this data stream for status codes and other useful information.
    This error occurs in the final step above when the client receives an HTTP status code that it recognises as ’500′.

    Fixing 500 errors – general

    This error can only be resolved by fixes to the Web server software. It is not a client-side problem. It is up to the operators of the Web server site to locate and analyse the logs which should give further information about the error.

    Fixing 500 errors – CheckUpDown

    Please contact us (email preferred) whenever you encounter 500 errors on your CheckUpDown account. We then have to liaise with your ISP and the vendor of the Web server software so they can trace the exact reason for the error. Correcting the error may require recoding program logic for the Web server software, which could take some time.

  44. Anon says:

    This Chow thing is full of viruses my antivirus software complains.

  45. smarter than a pile of electronics says:

    1 Vista windows is garbage
    2 Do what it said to do at the top of the page.
    3 Be 2% smarter than the plastic your working on
    4 Bill Gates is a greedy you know what and thats that !!!!

  46. bex says:

    i had a laptop bought for me, working fine, and i accidently cracked the screen. When it got back from being fixed today, it is saying this. Buti’m a tad worried- Because it’s a prefessional company that fixed it- and thats PC world!! DoI go back and show them??

  47. abraham says:

    ive had my laptop for a long time. its worked fine. then this pops up when i start it up telling me its not genuine. wtf!

  48. use ubuntu says:

    i solved this problem by booting on a linux cd and removing wgalogon.dll and wgatray.exe
    then i booted into windows clicked start then run-typed in Regsvr32 %Windir%\system32\LegitCheckControl.dll /u and presto!

  49. bubs says:

    WINDOWS 7 DEVELOPERS ONLY ???????????
    ok i a genuie copy of windows 7 with authenticity
    certificate now i get on computer and it says that it is not genuine phoned microsft to check this out and they say it is a genuine disc but it is for developers only
    and i should return it. cd key has also been blocked from microsoft. has anyone herd of this before

Leave a Reply