Severity scale:  

Windows Genuine Advantage Notifications (fake). How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as Windows Genuine Advantage Notifications virus | Type: Ransomware

Windows Genuine Advantage Notifications (also called as WGA) is the program that checks Windows XP validity and notifies the user when computer fails to pass the test. The cause of failing to pass the test can be a pirated copy of XP. Typically, user sees “This copy of Windows is not genuine” warning when computer fails to pass the validation test. However, it seems that cyber criminals have started to distribute the fake Windows Genuine Advantage notifications, which belongs to the category of ransomwares. As soon as it gets inside the system, this program locks computer's screen and asks to pay the fine for illegal activity on computer. For paying the fine, user is asked to use Ukash or Paysafecard prepayment systems and enter the code to this misleading alert. It has been reported to attack users who are located in Germany.

HOW CAN I GET INFECTED WITH Windows Genuine Advantage Notifications virus?

Typically to other Ukash viruses, Windows Genuine Advantage Notifications is based on trojan that locks computer down as soon as it gets inside the system. Ways how you can get infected with it include careless browsing sessions, opening spam emails and their attachments or simply downloading infected files on your PC. As soon as it gets inside the system, Windows Genuine Advantage Notifications virus displays its misleading message that looks more than legitimate:

Windows Genuine Advantage-Benachrichtigungen

Windows Genuine Advantage-Benachrichtigungen ist ein Bestandteil des Bemühens von Microsoft, Softwarepiraterie einzudämmen. Diese Software hilft dabei, zu bestimmen, ob es sich bei der auf Ihrem Computer installierten Windows Version um eine Originalversion oder Raubkopie handelt. Leider konnte diese Prüfung nicht erfolgreich abgeschlossen werden, daher wurde der Zugriff auf Ihren Computer temporär gesperrt. Als Gründe hierfür gelten eine abgelaufene oder mehrfach verwendete Windows-Lizenz, sowie eine illegal erworbene Windows-Lizenz (Raubkopie). Um den Zugang zu Ihrem PC und den darauf befindlichen Daten wieder zu erlangen, können Sie über das Bezahlfeld eine neue Original-Lizenz erwerben. Um eine Lizenz zu erhalten, erwerben Sie bitte einen Code eines unserer offiziellen Partner Paysafecard oder ukash und geben Sie diesen in das unten vorgesehene Fenster ein und bestätigen Sie mit “OK”. Eine Lizenzierung erfolgt automatisch innerhalb der nächsten 12 Stunden, bitte lassen Sie Ihren Computer in dieser Zeit eingeschaltet, damit der Vorgang durchgeführt werden kann. Falls Sie ein Upgrade auf Windows 8 wünschen, ist dies zu einem Einführungspreis von nur 100 € möglich.

Vielen Dank für das in Windows und Microsoft gesetze Vertrauen.

Be aware that this virus is extremely dangerous and may be distributed in other countries, not only Germany. That's because of its capability to determine the location of the victim. As soon as it gets inside the system, it locks it down and makes you incapable to access your desktop. Don't think that paying the fine will help you to unlock the system because you will only support the scammers by doing that. We highly recommend to remove Windows Genuine Advantage Notifications virus.

HOW CAN I REMOVE Windows Genuine Advantage Notifications virus?

It can be predetermined that this virus will block all your security programs, so you have to unlock your PC first of all. Follow these steps:

  1. Take another machine and use it to download Malwarebytes, Reimage or other reputable anti-malware program.
  2. Update the program and put into the USB drive or simple CD.
  3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
  4. Reboot computer infected with Windows Genuine Advantage Notifications virus once more and run a full system scan.

After following these steps, run a full system scan one more time to make sure that your PC is clean and has no infections inside.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
More information about this program can be found in Reimage review.

If you decided to select another anti-spyware, uninstall Reimage from your computer.
Press mentions on Reimage
Alternate Software
Alternate Software
Windows Genuine Advantage Notifications (fake) snapshot
Windows Genuine Advantage Notifications (fake) snapshot

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions