Quantcast
PC World: Technology Advice You Can Trust
Today at PC World
News, opinion, and links from the PC World staff.
Recent entries in this blog:
Friday, July 07, 2006 11:02 AM PT Posted by Erik Larkin

Microsoft's Doomed WGA Tactics

So Microsoft has stirred things up again, this time with a little program called WGA Notifications that they've been distributing via Automatic Updates.

By way of background, the point of Notifications is to display a pop-up at regular intervals if WGA thinks you're running an unlicensed version of Windows. Nagware, basically. Microsoft began quietly distributing it in April as a critical update, along with the WGA part that runs the license check. You'd get a license agreement pop-up with an opportunity to decline the install, but once installed you couldn't uninstall (via regular means, read on).

Then the news came out that Notifications was regularly sending info from your computer back to Microsoft. According to the now-updated EULA, that info consists of: "your Windows XP product key, hard drive serial number, PC manufacturer, operating system version, Windows XP product ID, PC BIOS information, user locale setting, language version of Windows XP, validation result and whether the installation of this supplement was successful. Certain information derived from your IP address, which cannot be used to identify you, is retained in association with this computer information."

So Microsoft was surreptitiously using a program it misleadingly distributed that couldn't be removed to send information from your computer to itself. Not surprisingly, plenty of people had a bit of a problem with this behavior. There are now two lawsuits filed against Microsoft as a result.

This is the age of citizen journalism. Even if every tech media worker was asleep at the wheel (which we weren't), did Microsoft really think that they could completely slip Notifications past an army of savvy bloggers? With its misleading install (critical security patch my patootsky) and phone-home behavior that were sure to rile people?

I do understand Microsoft's need to protect their business. Aside from dinging MS's bottom line, pirated copies of Windows are also a security risk. They're more likely to get infected by bots and other malware, and once part of a botnet they can wreak serious havoc (Blue Security, anyone?). My guess is that's because people with a pirated copy are afraid to get updates, even though MS says pirated versions can still get security patches.

Microsoft had a fine line to walk here. To catch pirates, they didn't want to strongly advertise Notifications with a great big balloon that said "Don't install this if you're a pirate." I get it. But unfortuately, they went far over to the other side of the line with a tactic that is seriously aggravating a large number of honest, paying customers. And the ironic result is that Notifications is now probably getting a lot more attention than it would have if Microsoft had just been up front about it to begin with. Honesty, meet best policy. How d'ya do.

Microsoft has backtracked somewhat as a result of the backlash. They've posted instructions on how to manually disable or remove Notifications. They updated their EULA, and they've said they will pull the phone-home behavior from the final version. But Notifications is still coming out as a critical security update, and Microsoft has said it will become a mandatory install.

WGANotifications-EULA.jpg

And to top it off, there are rumors over at ZDNet about Microsoft adding a "kill-switch" so that if WGA thinks your copy is bogus, it shuts you down. Just rumors, but so far undenied.

If you've already installed Notifications, you can follow the instructions above to get rid of it. If you haven't yet installed it, you can decline the installation for the time being (see the image above). I recommend setting Automatic Updates to download updates, but to not install until you say so. At which time you can look at just what it wants to install and say yes or no for each one. Here are more detailed instructions.

Comments

Eric,

Based on the latest MS Q & A docs and EULA, the WGA Notification Tool never did send info back to MS. It only received a settings file from MS to tell it how often it should pop-up when the host computer booted. It is the WGA Validation Tool that sends computer info back to MS over the internet , and it does this periodically as determined by MS. Removing the WGA Notification Tool does nothing to prevent MS from receiving info about the host computer and operating system.

John Birch
July 07, 2006
2:44 PM PT

WGA is evil, evil, evil, evil. Remove the WGA Notification software by using RemoveWGA.exe - do a search for the RemoveWGA.exe utility and download it and get rid of the evil WGA Notification software.

Microsoft is EVIL
July 08, 2006
1:22 PM PT

Setting your Windows machine to automatic download and install is absolute safe and the best option. WGA spyware requires you accept the EULA, and thus doesn't get installed if everything is automated (on your install history, it will always say failed or cancelled). Instead, it pops up in the corner asking you to agree to its EULA. If you don't, it just harmlessly sits there. Setting Windows to download updates automatically but install manually is far more dangerous, as if you pick the express install, WGA spyware gets installed along with any updates you want to apply (unless you do it custom and deselect it manually). Windows has way too many security problems to leave unpatched, just do it with caution.

Anonymous
July 08, 2006
10:09 PM PT

Re: "Remove the WGA Notification software by using RemoveWGA.exe - download it and get rid of the evil WGA Notification software."

RemoveWGA is incorrectly named. RemoveWGA only removes the notification part, phoning home, and does not touch the Validation part.Windows Genuine Advantage Notifications is different than Windows Genuine Advantage Validation.

The last WGA notification update KB905474, cannot be removed in a clean way, because it purposefully blocks the deletion of the WgaLogon.dll.

Because of that, the only way is to force the WGA dll to unload from memory, prior deleting it. Doing so, it will crash your system (you should do a hard reboot before it happens).

It is not a proper way thought, and you shouldn't do it if you haven't backups. If you prefer to not take any risk, Microsoft has published an article explaining how to remove the WGA notification PILOT (not the final release) manually http://support.microsoft.com/?scid=kb;en-us;921914

RemoveWGA is Incorrectly Named
July 09, 2006
8:53 AM PT

i got my pc used after all the trouble i got at first got a bootup virus had to take it back and get it fixed it cost me $750 that was 3 years ago now i find out it is a pirate after all the money paying my isp to even be here and the cost of the pc thay want more money i did not do this to my pc and it is not fair IMHO

Anonymous
July 09, 2006
1:42 PM PT

Dear "Anonymous on Sunday, July 09, 2006, 01:42 PM (PST)",
Please put everything back in the box and return it to the manufacturer. You have no business owning a computer.

Johnny Winkle
July 09, 2006
4:53 PM PT

dear johnny winkle take it back to a computer repar shop where i got riped off my pc was used from 2001 it had win xp home now it has xp pro i see most pirate copies are xp pro all i'm saying is it is not fair for those that do not know if it was not for good sites like this i would not know nothing i understand the other side but would you take it back to some one like that i did not know nothing about computers peace

Anonymous
July 09, 2006
10:09 PM PT

This is NOT ACCEPTABLE BEHAVIOR!!! Microsoft has NO BUSINESS doing this to MY COMPUTER!! How DARE they think they can get away with this! If I had them in this room with me, I would choke EVERY ONE of them with my bare hands! Let me tell you, I uninstalled THAT CRAP and I WILL NOT be putting it back on EVER! If they think I'm going to install THAT CRAP again, they have another thing coming! NEVER!

Carol J
July 09, 2006
10:15 PM PT

Please. Read Microsoft Windows EULA. And after that tell yourself: Is Bill Gates and Microsoft simple thief and robber.

Dzemal Kalajdzisalihovic
July 09, 2006
10:47 PM PT

get a mac everyone.

maccie
July 10, 2006
3:04 AM PT

Start using legal software and You dont have to worry.

MCP
July 10, 2006
5:41 AM PT

MCP - MS, stop trying to spy on me. Novel concept eh? BTW, being a MCP isn't that impressive. ;)


Maccie - Yes because Mac's are 100% safe from everything guaranteed, right?

NoFanBoy
July 10, 2006
6:10 AM PT

I was installing a new firewall & my PC was running slow, so I kept looking at the task manager to see what was running. WGA was running all the time after every restart I did; although, WGA wasn't causing the slowdowns, I believe. I just find it odd that WGA was running after every restart I did that day.

SD
July 10, 2006
6:12 AM PT

If its not wga notifier, it is windows update, ms office, ms money, ie, messenger, etc.... All of these report to MS. And sending the product key and your location to MS by MSProducts is as easy as 123.... WGA Notifier might be a red herring in a school of tattle tails...

savvy pc user
July 10, 2006
7:32 AM PT

If everyone was using legal and legitimate copies of MS Products, they wouldn't have had to release this WGA thing. Everyone who complains should stop using MS if you really think it's that bad. Read the EULA instead of hitting accept instantly. You may learn a thing or two about what programs actually do. I think that what MS did was perfectly legal and within reason. Yes, it sucks that they had to do it, but with all the pirating that's out there, measures have to be taken!

Spoon
July 10, 2006
9:05 AM PT

Linux! I don't think I need to say more. For all you people who still need windows, get a non microsoft firewall like Zone Alarm and have it block the messages.

Manu Mukerji
July 10, 2006
11:38 AM PT

i ditched windows three years ago, why wont everyone else? linux is the best choice

bill gates
July 10, 2006
12:42 PM PT

Oh that's great! And the cost of training Windows users how to use Linux! :)

Grayson Peddie
July 10, 2006
2:06 PM PT

You know, all it takes is one government of one country to start the domino effect. Picture them kicking out MS and banning their products, then taking tax dollars and retraining the entire populace in Linux. Once successful, it would be emulated by every country in the world (except the USA) Don't kid yerself. It could happen. Just takes one.

fedupwithMS
July 10, 2006
2:22 PM PT

I guess I got zapped by the WGA notification and validation software recently. I kept getting a message when I booted up saying that my Windows XP Professional was not genuine. I could either choose to "resolve" it or "resolve later". I kept choosing resolve later. My computer could not even log me into MSN my ISP. I finally called DELL who I bought the computer from and they had me do a System Restore back to May 15. Everything seems to be working OK for now, but after reading about this issue, I fear a second wave of notifications will be coming. I am going to notify DELL once again to see why their software is suspect to being a counterfeit. Has anyone else had similar problems with Dell?

Jlyoungclan
July 10, 2006
3:46 PM PT

Wy don't you geniuses whining about this come up with an acceptable way for Microsoft to protect its product? Whats that- you cant? Oh.

Andrew Thatcher
July 10, 2006
4:57 PM PT

IN the past I have had Automatic Updates enabeled, but no longer. I formatted the C partition, reinstalled XP Pro and the programs I
use, but I have automatic updates turned off along with error reporting and remote assistance.

I do not worry about not having the so called security updates missing. Years ago to learn about XP, I ran an illegal copy for about 6 months. No problems, I basically like the program, but I want to try Linux.

Clyde Hunter, Jr.
July 10, 2006
7:54 PM PT

News Flash, Andrew:

Just as M$ is owned by Bill Gates, not me, I own my computer, not M$! On that note, I decide what software goes on my computer, not Gates.

M$ is crying because of pirated software, tough! It's one of the of the hazards of the business. Why should anyone who doesn't work for M$ design a non-fraudulent method to "protect M$"? It's not my job.

Having no formal computer training, I am teaching myself Linux from a book. If I can, anyone can.

Or does M$ feel its ok to spy on people since Bush does?

learning_linux
July 10, 2006
9:36 PM PT

OK, 1ST;
SPOON-
Repeat after me; I have rights, I have rights, I have rights, etc. [about 3000x oughta do it]
2ND;
Andrew Thatcher;
IF Micro$loth wanted to be FAIR, & eliminate 'piracy,' there is a safe, easy, legal way- stop trying to ripoff their customers, sell Windoz @ a fair & reasonable price & put the pirates out of business by being COMPETITIVE. Windoz is overpriced about 10x for most versions, w/ some being much worse @ their original price points.
& remember, it is a matter of historical record that Micr0$loth Windoz2K contains code stolen from IBM's OS2.

j
July 11, 2006
12:03 AM PT

"Honetsy is the best policy" applies to all users. Not just Microsoft.

Henry
July 11, 2006
1:55 PM PT

Yeah, everyone install Linux, just download a CD, install it in 10 minutes, search for drivers for your computer (14 days), install your printer and scanner (14 days), patch it manually (no more than 2 hours per week) and rest assured that your box will be used as ftp server for kiddyporn in less than two weeks because you configured it incorrectly. Linux is not for users.

None
July 12, 2006
1:33 AM PT

A detail being overlooked: WGA doesn't just validate the license, it also prevents the license from being installed on more than one machine. MS "rents" the license, "Fair Use" does not apply in the U.S.

Another detail: It is the marketing-driven architecture of W$ that makes it so susceptible to attack. MS could change this if it wanted to. Instead, it will add yet more complexity and cost to Vista. And charge customers for security services to protect against flaws it has created. What a racket.

Re the Linux snides like the one just above, obviously ignorant. We've had Linux systems, running W$ on top inside a free VMPlayer virtual machine when needed, for years. Not for everyone, but why always the vicious remarks defending W$?

Mingus
July 12, 2006
7:00 AM PT

I paid $89 for an "OEM" copy of Windows XP from a vendor in CA- got a disk that looks legit with keys and all. Now MicroSoft wants $139 from me to make it legit? THAT SOUNDS/LOOKS/SMELLS LIKE EXTORTION TO ME!

John Moore
July 13, 2006
11:19 AM PT

Where's the crack?

JoseGaspar
July 13, 2006
4:41 PM PT

ahh, the joys of hearing everyone complain about big bad microsoft. so the company has faults, what company doesn't? there have actually been benefits from microsoft. for you mac and linux users, it microsoft has been what has kept you relatively safe from the viruses and problems the we microsoft users experience. this is because microsoft has been the juicier target, but without microsoft, what would happen to mac and linux (their not perfect)?

jimbob
July 13, 2006
7:13 PM PT

and before you call me an ignorant, brainwashed follower of microsoft, consider yourself in microsofts position when releasing this software. they are trying to make money like any business does, and when people pirate software, they lose money. it would be like you making a car and then having someone copy it and sell it for less or nothing. of course you would feel burned and want to stop the copies from being sold or used.

jimbob
July 13, 2006
7:17 PM PT

I feel this is the start of a move by Microsoft to "rent" software. When they have an effective monitoring sysem in place, they can put expirations onto the software in your system.
A good alternative is to move over to LINUX and OpenOffice!

Ray M
July 15, 2006
3:10 PM PT

Every major system vendor on the planet has included an OEM license for Windows XP since the fall of 2001. The only "illicit" copies, therefore, are from less scrupulous local dealers who save some bucks on what they sold or tech savvy users who reloaded their Windows 98/ME/NT/2K systems. Neither of these represents a significant number.

On the other hand; because there are at least 100 flavors of Windows XP, almost every system which has had XP reloaded by a service tech now fails WGA as they did not bother to get the original installs which came with that system.

IMHO, M$'s numbers for illegal copies of Windows are greatly exagerated. Most of the systems out there have a valid license; but, a high percentage no longer have that license installed.

M$ could fix the problem too by issuing a CD which would install on Dell's, HP's, Compaq's. Acer's, etcetera, and recognize from the CD Key if it was OEM, corporate, or an upgrade. Office 97 worked this way; why can't it be done for XP?

Davis McCarn
July 17, 2006
12:21 PM PT

I purchased an MS Windows XP Pro Upgrade for an older computer, which crashed and burned beyond repair two months later. I purchased a new machine with MS Windows XP Home to save a few bucks, since I already owned the Pro Upgrade. After upgrading from Home to Pro, the WGA tool said my install was not legal. After calling MS, was told that license is only for ONE computer and was not valid to be installed on another computer, even if that computer replaces the original computer. Regardless of what MS says, I was absolutely blocked from doing any windows updates and had deal with the annoying illegal notificatin splash screen flashing up at boot up and several times a day. I had to purchase a new XP Pro upgrade to resolve the problem. I understand the need to catch the pirates, but this course of action is going too far. If I own the software and the PC crashes, I should be able to install it on my new PC. MS should punish the pirates, not their legal customers.

Susan
July 17, 2006
1:31 PM PT

Most of the piracy is happening overseas especially in China.

If Microsoft would lower there prices so the average person could afford to buy them they would sell more and make as much or even greater profits. This would also stop a lot of piracy.

As far as what machine a OS is installed on, that should be up to the person who owns the OS license, they should not be forced to buy a new license just because they bought a new PC or had to replace it. A lot of people can not afford to buy a new OS every couple of years just because Microsoft want to create more revenue. Especially when there OS?s and other application are not even as good as some of the free apps out there.

They also need to focus more on the quality of there products. It seems all they can do is miss announced release dates and then it still takes dozens of fixes before the software is even safe or stable.

Tom D.
July 17, 2006
4:13 PM PT

I find it interesting how my system restore is now experiencing a problem and needs to close, that is BEFORE I get the chance to undo the dreadxed WGA checker. I made the misteak of Express Installing the updates that were downloaded for me through autoupdate, yeah, I know lazy... So I also have tried the firewall leak tester, or removewga.exe. It did stop the notifications and what a supprise there is an new update waiting for me again. Did I mention that a check of the properties of My Computer will not even allow me to see if the disable system restore box is now checked? This also creates some error that needs to be closed "Run a DLL as an App" Good thing I have my entire system backed up for just such an emergency. I had hopeed there was a way outa' this but it ain't looking to good. Any gurus out there got ideas how to restore funtionallity to the system restore feature? Has anyone else noticed other things that are being disabled? Also will checking the box (in automatic updates, after electing NOT in install this KB905474) that says "Don't notify me about these updates again." turn off more then just this update? Like all future updates??

Kevin
July 18, 2006
8:37 PM PT

Simple solution... Lower the price of XP.

Does M$ have the right to protect their product? Of course they do. Is WGA spyware? Hmmm... It was delivered as a critical update (which it really isn't as it does not fix anything broken) and it reads information on my computer to send out over the net... Sure sounds like spyware. Find another way - WGA is wrong.

To all the Mac/Linux lovers: I'm not dissing the products but the only reason you have fewer virus/spam related problems is because you hold shuch a small percentage of the userbase. If you had the numbers that M$ has then you'd be dealing with similar problems. The only reason I haven't moved to either platform is that the applications I need are not available for those platforms.

Rob L.
July 21, 2006
9:42 AM PT

The Linux solution sounds sweet until you discover that most high-end PC games won't run under it, even with an emulation package.

So for gamers there are two solutions: consoles, or the ever-increasing payola to MS.

Support your local billionaire! All hail the King of IT Monopolies! I bow before Your Highness and offer my tender posterior. Do as you like with it, for I am a typical pro-business American.

And goodbye to democracy, justice, and the free market.

MisterWrite
April 03, 2007
11:16 AM PT
Post a comment Post a comment
Archives
View posts from:
 

PC World's Marketplace

PC World's Free Whitepapers

Visit other IDG sites: