Severity scale:  
  (79/100)

Windows Genuine Advantage Notifications (fake). How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as Windows Genuine Advantage Notifications virus | Type: Ransomware
12

Windows Genuine Advantage Notifications (also called as WGA) is the program that checks Windows XP validity and notifies the user when computer fails to pass the test. The cause of failing to pass the test can be a pirated copy of XP. Typically, user sees “This copy of Windows is not genuine” warning when computer fails to pass the validation test. However, it seems that cyber criminals have started to distribute the fake Windows Genuine Advantage notifications, which belongs to the category of ransomwares. As soon as it gets inside the system, this program locks computer's screen and asks to pay the fine for illegal activity on computer. For paying the fine, user is asked to use Ukash or Paysafecard prepayment systems and enter the code to this misleading alert. It has been reported to attack users who are located in Germany.

HOW CAN I GET INFECTED WITH Windows Genuine Advantage Notifications virus?

Typically to other Ukash viruses, Windows Genuine Advantage Notifications is based on trojan that locks computer down as soon as it gets inside the system. Ways how you can get infected with it include careless browsing sessions, opening spam emails and their attachments or simply downloading infected files on your PC. As soon as it gets inside the system, Windows Genuine Advantage Notifications virus displays its misleading message that looks more than legitimate:

Windows Genuine Advantage-Benachrichtigungen

Windows Genuine Advantage-Benachrichtigungen ist ein Bestandteil des Bemühens von Microsoft, Softwarepiraterie einzudämmen. Diese Software hilft dabei, zu bestimmen, ob es sich bei der auf Ihrem Computer installierten Windows Version um eine Originalversion oder Raubkopie handelt. Leider konnte diese Prüfung nicht erfolgreich abgeschlossen werden, daher wurde der Zugriff auf Ihren Computer temporär gesperrt. Als Gründe hierfür gelten eine abgelaufene oder mehrfach verwendete Windows-Lizenz, sowie eine illegal erworbene Windows-Lizenz (Raubkopie). Um den Zugang zu Ihrem PC und den darauf befindlichen Daten wieder zu erlangen, können Sie über das Bezahlfeld eine neue Original-Lizenz erwerben. Um eine Lizenz zu erhalten, erwerben Sie bitte einen Code eines unserer offiziellen Partner Paysafecard oder ukash und geben Sie diesen in das unten vorgesehene Fenster ein und bestätigen Sie mit “OK”. Eine Lizenzierung erfolgt automatisch innerhalb der nächsten 12 Stunden, bitte lassen Sie Ihren Computer in dieser Zeit eingeschaltet, damit der Vorgang durchgeführt werden kann. Falls Sie ein Upgrade auf Windows 8 wünschen, ist dies zu einem Einführungspreis von nur 100 € möglich.

Vielen Dank für das in Windows und Microsoft gesetze Vertrauen.

Be aware that this virus is extremely dangerous and may be distributed in other countries, not only Germany. That's because of its capability to determine the location of the victim. As soon as it gets inside the system, it locks it down and makes you incapable to access your desktop. Don't think that paying the fine will help you to unlock the system because you will only support the scammers by doing that. We highly recommend to remove Windows Genuine Advantage Notifications virus.

HOW CAN I REMOVE Windows Genuine Advantage Notifications virus?

It can be predetermined that this virus will block all your security programs, so you have to unlock your PC first of all. Follow these steps:

  1. Take another machine and use it to download Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus, Reimage or other reputable anti-malware program.
  2. Update the program and put into the USB drive or simple CD.
  3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
  4. Reboot computer infected with Windows Genuine Advantage Notifications virus once more and run a full system scan.

After following these steps, run a full system scan one more time to make sure that your PC is clean and has no infections inside.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Genuine Advantage Notifications (fake) you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Genuine Advantage Notifications (fake). Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Genuine Advantage Notifications (fake) (2013-02-08)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Genuine Advantage Notifications (fake) (2013-02-08)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Genuine Advantage Notifications (fake) (2013-02-08)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Genuine Advantage Notifications (fake) (2013-02-08)
Windows Genuine Advantage Notifications (fake) snapshot
Windows Genuine Advantage Notifications (fake) snapshot