Severity scale  

Windows Genuine Advantage Notifications (fake). How to Remove? (Uninstall Guide)

removal by ,   Also known as Windows Genuine Advantage Notifications virus | Type: Ransomware

Windows Genuine Advantage Notifications (also called as WGA) is the program that checks Windows XP validity and notifies the user when computer fails to pass the test. The cause of failing to pass the test can be a pirated copy of XP. Typically, user sees “This copy of Windows is not genuine” warning when computer fails to pass the validation test. However, it seems that cyber criminals have started to distribute the fake Windows Genuine Advantage notifications, which belongs to the category of ransomwares. As soon as it gets inside the system, this program locks computer's screen and asks to pay the fine for illegal activity on computer. For paying the fine, user is asked to use Ukash or Paysafecard prepayment systems and enter the code to this misleading alert. It has been reported to attack users who are located in Germany. 

HOW CAN I GET INFECTED WITH Windows Genuine Advantage Notifications virus?

Typically to other Ukash viruses, Windows Genuine Advantage Notifications is based on trojan that locks computer down as soon as it gets inside the system. Ways how you can get infected with it include careless browsing sessions, opening spam emails and their attachments or simply downloading infected files on your PC. As soon as it gets inside the system, Windows Genuine Advantage Notifications virus displays its misleading message that looks more than legitimate:

Windows Genuine Advantage-Benachrichtigungen

Windows Genuine Advantage-Benachrichtigungen ist ein Bestandteil des Bemühens von Microsoft, Softwarepiraterie einzudämmen. Diese Software hilft dabei, zu bestimmen, ob es sich bei der auf Ihrem Computer installierten Windows Version um eine Originalversion oder Raubkopie handelt. Leider konnte diese Prüfung nicht erfolgreich abgeschlossen werden, daher wurde der Zugriff auf Ihren Computer temporär gesperrt. Als Gründe hierfür gelten eine abgelaufene oder mehrfach verwendete Windows-Lizenz, sowie eine illegal erworbene Windows-Lizenz (Raubkopie). Um den Zugang zu Ihrem PC und den darauf befindlichen Daten wieder zu erlangen, können Sie über das Bezahlfeld eine neue Original-Lizenz erwerben. Um eine Lizenz zu erhalten, erwerben Sie bitte einen Code eines unserer offiziellen Partner Paysafecard oder ukash und geben Sie diesen in das unten vorgesehene Fenster ein und bestätigen Sie mit "OK". Eine Lizenzierung erfolgt automatisch innerhalb der nächsten 12 Stunden, bitte lassen Sie Ihren Computer in dieser Zeit eingeschaltet, damit der Vorgang durchgeführt werden kann. Falls Sie ein Upgrade auf Windows 8 wünschen, ist dies zu einem Einführungspreis von nur 100 € möglich.

Vielen Dank für das in Windows und Microsoft gesetze Vertrauen.

Be aware that this virus is extremely dangerous and may be distributed in other countries, not only Germany. That's because of its capability to determine the location of the victim.  As soon as it gets inside the system, it locks it down and makes you incapable to access your desktop. Don't think that paying the fine will help you to unlock the system because you will only support the scammers by doing that. We highly recommend to remove Windows Genuine Advantage Notifications virus.

HOW CAN I REMOVE Windows Genuine Advantage Notifications virus?

It can be predetermined that this virus will block all your security programs, so you have to unlock your PC first of all. Follow these steps:

  1. Take another machine and use it to download STOPzilla, SpyHunter or other reputable anti-malware program.
  2. Update the program and put into the USB drive or simple CD.
  3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
  4. Reboot computer infected with Windows Genuine Advantage Notifications virus once more and run a full system scan.

After following these steps, run a full system scan one more time to make sure that your PC is clean and has no infections inside. 

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
SpyHunter - remover Happiness
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Webroot SecureAnywhere AntiVirus SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.
SpyHunter is recommended to uninstall Windows Genuine Advantage Notifications (fake). Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of SpyHunter malware removal tool.

More information about this program can be found in SpyHunter review.

If you decided to select another anti-spyware, uninstall SpyHunter from your computer.
more than 40.000.000 downloads!
Webroot SecureAnywhere AntiVirus is recommended remover to uninstall Windows Genuine Advantage Notifications (fake). You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Alternate Software
Alternate Software
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2013-02-08 06:27)
We are testing Reimage's efficiency
Windows Genuine Advantage Notifications (fake) screenshot
Windows Genuine Advantage Notifications (fake) snapshot

Removal guides in other languages

Information updated:

Comments on Windows Genuine Advantage Notifications (fake)

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook