Re: Windows Genuine Advantage Notification (KB905474)

[Cher (BIRDWISE)]

Re: Windows Genuine Advantage Notification (KB905474)

WOAH, I beg to differ with you on this issue. Please read my reply in the WGA
Latest Info post to see what havoc it has caused and is continuing to ause on
my pc. I have a genuinee copy and it has been validated...the problems I am
edperienced are nothign less than spyare. I am unable to use my pc with this
update on it due to it's overtaking of my homepage with microsft URLs
(several), regardless of how many times I appy my homepage addy...it has
ballons every second on toolbar at bottom; tells me I am possibly infected
and need to download one of two MIcrosoft anti virus softwres to
rectify...there are continuous and huge screens blocking my work. I won;t go
into it all again but I am so mad I can't express it. None of the many fixes
have worked and I have rpeatedly tried them all. Yo can read about this allin
my post; I do not want to be redundant.
I am having morero problems than validtion issues...these are major
malicious pop ups that will not go away nor allow me to stop trying to remove
them for a second. C BIRDWISE. I am running ESET andd ran Nod 32 and did an
indepth etc etc etc I am not infected...I do not need Microsft's anti virus
software. I need to get ri of Microsoft's spyware....

"Carey Frisch [MVP]" wrote:

> Windows Genuine Advantage Notification (KB905474) does not cause
> any problems unless, of course, you happen to be using a non-genuine
> version of Windows. This particular update was not designed to be
> uninstalled.
>
> --
> Carey Frisch
> Microsoft MVP
> Windows - Shell/User
> Microsoft Community Newsgroups
> news://msnews.microsoft.com/
>
> ---------------------------------------------------------------------------­----------------
>
> "Larry Mauriello" wrote:
>
> | I have read this *update* causes problems. I marked it 'removed' in Windows
> | Update but It shows w/the Yellow(!)
> | saying I have chosen to Hide an Important update. Do I just ignore this or
> | install it?
> |
> | I alos for some reason have 2 'Programs' listed in Start/All Prgrams list.
> | 1 says Windows Update, the othe MS Update.
> | Properties are not the same yet both go to the same web site. I am guessing
> | it is ok to remove on. I mean they are just shortcuts
> | anyway, right?
>
>

 

[st]

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

"Cher (BIRDWISE)" <CherBIRDWISE@discussions.microsoft.com> сообщил/сообщила в новостях следующее: news:974188C8-23B3-497A-9ED5-B95034EC3BEB@microsoft.com...

> tells me I am possibly infected
> and need to download one of two MIcrosoft anti virus softwres


That's clearly not WGA but some malware. Visit some site which analyzes people's HijackThis logs and such.
For example, this one: http://virusinfo.info/forumdisplay.php?f=84

 

[William R. Walsh]

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

Hi!

> WOAH, I beg to differ with you on this issue.

You may differ as much as you like, but something is wrong with your
computer and it is *not* Microsoft that has done it.

Until recently, with Windows Live OneCare and Windows Defender, Microsoft
hasn't even been in the Anti-Virus and Anti-Spyware business.

You have a system that is in a mess, and clearly the two tools you are
trying to fix things just aren't up to the challenge. This does not
necessarily mean that they are bad tools. I suggest you research the
problems you have, along with the *exact* messages you get, and check to see
what the best course of action is.

William

 

[Malke]

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

Cher (BIRDWISE) wrote:

> WOAH, I beg to differ with you on this issue. Please read my reply in the
> WGA Latest Info post to see what havoc it has caused and is continuing to
> ause on my pc. I have a genuinee copy and it has been validated...the
> problems I am edperienced are nothign less than spyare. I am unable to use
> my pc with this update on it due to it's overtaking of my homepage with
> microsft URLs (several), regardless of how many times I appy my homepage
> addy...it has ballons every second on toolbar at bottom; tells me I am
> possibly infected and need to download one of two MIcrosoft anti virus
> softwres to rectify...there are continuous and huge screens blocking my
> work. I won;t go into it all again but I am so mad I can't express it.
> None of the many fixes have worked and I have rpeatedly tried them all. Yo
> can read about this allin my post; I do not want to be redundant.
> I am having morero problems than validtion issues...these are major
> malicious pop ups that will not go away nor allow me to stop trying to
> remove them for a second. C BIRDWISE. I am running ESET andd ran Nod 32
> and did an indepth etc etc etc I am not infected...I do not need
> Microsft's anti virus software. I need to get ri of Microsoft's
> spyware....

This has nothing to do with Microsoft. Your system is infected with a rogue
antivirus program. It is called "rogue" because it pretends to be A Good
Guy but is really Evil. Do not pay them!

Because you didn't give me the name of the program that is trying to get you
to buy it, I can't point you to specific removal steps. Look for them here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

If the rogue is XP Antivirus 2008/09, here are removal steps:

http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009
http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions)

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

 

[PA Bear [MS MVP]]

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

I'm with Malke: You've got a hijackware infection, my dear, and it has
nothing to do with installing KB905474.

Any of the below look familiar?...

Rogue Antivirus - A Closer Look at Win32/Antivirusxp
http://blogs.technet.com/mmpc/archi...virus-a-closer-look-at-win32-antivirusxp.aspx

Anatomy of a malware scam
http://www.theregister.co.uk/2008/08/22/anatomy_of_a_hack/print.html
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Cher (BIRDWISE) wrote:
> WOAH, I beg to differ with you on this issue. Please read my reply in the
> WGA Latest Info post to see what havoc it has caused and is continuing to
> ause on my pc. I have a genuinee copy and it has been validated...the
> problems I am edperienced are nothign less than spyare. I am unable to use
> my pc with this update on it due to it's overtaking of my homepage with
> microsft URLs (several), regardless of how many times I appy my homepage
> addy...it has ballons every second on toolbar at bottom; tells me I am
> possibly infected and need to download one of two MIcrosoft anti virus
> softwres to rectify...there are continuous and huge screens blocking my
> work. I won;t go into it all again but I am so mad I can't express it.
> None
> of the many fixes have worked and I have rpeatedly tried them all. Yo can
> read about this allin my post; I do not want to be redundant.
> I am having morero problems than validtion issues...these are major
> malicious pop ups that will not go away nor allow me to stop trying to
> remove them for a second. C BIRDWISE. I am running ESET andd ran Nod 32
> and
> did an indepth etc etc etc I am not infected...I do not need Microsft's
> anti virus software. I need to get ri of Microsoft's spyware....
>
> "Carey Frisch [MVP]" wrote:
>
>> Windows Genuine Advantage Notification (KB905474) does not cause
>> any problems unless, of course, you happen to be using a non-genuine
>> version of Windows. This particular update was not designed to be
>> uninstalled.
>>
>> --
>> Carey Frisch
>> Microsoft MVP
>> Windows - Shell/User
>> Microsoft Community Newsgroups
>> news://msnews.microsoft.com/
>>
>> ---------------------------------------------------------------------------­----------------
>>
>> "Larry Mauriello" wrote:
>>
>>> I have read this *update* causes problems. I marked it 'removed' in
>>> Windows Update but It shows w/the Yellow(!)
>>> saying I have chosen to Hide an Important update. Do I just ignore this
>>> or
>>> install it?
>>>
>>> I alos for some reason have 2 'Programs' listed in Start/All Prgrams
>>> list. 1 says Windows Update, the othe MS Update.
>>> Properties are not the same yet both go to the same web site. I am
>>> guessing it is ok to remove on. I mean they are just shortcuts
>>> anyway, right?

 

[Curt Christianson]

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

Excellent answer Bear, but how come you never call *me* "dear"?? <rvvf>
;-)

--
Curt

http://dundats.mvps.org/
http://www.aumha.org/
http://dundats.mvps.org/AutoIt/default.aspx





"PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
news:OLNRYIWKJHA.3412@TK2MSFTNGP05.phx.gbl...
> I'm with Malke: You've got a hijackware infection, my dear, and it has
> nothing to do with installing KB905474.
>
> Any of the below look familiar?...
>
> Rogue Antivirus - A Closer Look at Win32/Antivirusxp
> http://blogs.technet.com/mmpc/archi...virus-a-closer-look-at-win32-antivirusxp.aspx
>
> Anatomy of a malware scam
> http://www.theregister.co.uk/2008/08/22/anatomy_of_a_hack/print.html
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
> Cher (BIRDWISE) wrote:
>> WOAH, I beg to differ with you on this issue. Please read my reply in the
>> WGA Latest Info post to see what havoc it has caused and is continuing to
>> ause on my pc. I have a genuinee copy and it has been validated...the
>> problems I am edperienced are nothign less than spyare. I am unable to
>> use
>> my pc with this update on it due to it's overtaking of my homepage with
>> microsft URLs (several), regardless of how many times I appy my homepage
>> addy...it has ballons every second on toolbar at bottom; tells me I am
>> possibly infected and need to download one of two MIcrosoft anti virus
>> softwres to rectify...there are continuous and huge screens blocking my
>> work. I won;t go into it all again but I am so mad I can't express it.
>> None
>> of the many fixes have worked and I have rpeatedly tried them all. Yo can
>> read about this allin my post; I do not want to be redundant.
>> I am having morero problems than validtion issues...these are major
>> malicious pop ups that will not go away nor allow me to stop trying to
>> remove them for a second. C BIRDWISE. I am running ESET andd ran Nod 32
>> and
>> did an indepth etc etc etc I am not infected...I do not need Microsft's
>> anti virus software. I need to get ri of Microsoft's spyware....
>>
>> "Carey Frisch [MVP]" wrote:
>>
>>> Windows Genuine Advantage Notification (KB905474) does not cause
>>> any problems unless, of course, you happen to be using a non-genuine
>>> version of Windows. This particular update was not designed to be
>>> uninstalled.
>>>
>>> --
>>> Carey Frisch
>>> Microsoft MVP
>>> Windows - Shell/User
>>> Microsoft Community Newsgroups
>>> news://msnews.microsoft.com/
>>>
>>> ---------------------------------------------------------------------------­----------------
>>>
>>> "Larry Mauriello" wrote:
>>>
>>>> I have read this *update* causes problems. I marked it 'removed' in
>>>> Windows Update but It shows w/the Yellow(!)
>>>> saying I have chosen to Hide an Important update. Do I just ignore this
>>>> or
>>>> install it?
>>>>
>>>> I alos for some reason have 2 'Programs' listed in Start/All Prgrams
>>>> list. 1 says Windows Update, the othe MS Update.
>>>> Properties are not the same yet both go to the same web site. I am
>>>> guessing it is ok to remove on. I mean they are just shortcuts
>>>> anyway, right?
>

 

[PA Bear [MS MVP]]

Re: Windows Genuine Advantage Notification (KB905474)

Re: Windows Genuine Advantage Notification (KB905474)

[reply censored]

Curt Christianson wrote:
> Excellent answer Bear, but how come you never call *me* "dear"?? <rvvf>
> ;-)
>
>
> "PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
> news:OLNRYIWKJHA.3412@TK2MSFTNGP05.phx.gbl...
>> I'm with Malke: You've got a hijackware infection, my dear, and it has
>> nothing to do with installing KB905474.
>>
>> Any of the below look familiar?...
>>
>> Rogue Antivirus - A Closer Look at Win32/Antivirusxp
>> http://blogs.technet.com/mmpc/archi...virus-a-closer-look-at-win32-antivirusxp.aspx
>>
>> Anatomy of a malware scam
>> http://www.theregister.co.uk/2008/08/22/anatomy_of_a_hack/print.html
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>> Cher (BIRDWISE) wrote:
>>> WOAH, I beg to differ with you on this issue. Please read my reply in
>>> the
>>> WGA Latest Info post to see what havoc it has caused and is continuing
>>> to
>>> ause on my pc. I have a genuinee copy and it has been validated...the
>>> problems I am edperienced are nothign less than spyare. I am unable to
>>> use
>>> my pc with this update on it due to it's overtaking of my homepage with
>>> microsft URLs (several), regardless of how many times I appy my homepage
>>> addy...it has ballons every second on toolbar at bottom; tells me I am
>>> possibly infected and need to download one of two MIcrosoft anti virus
>>> softwres to rectify...there are continuous and huge screens blocking my
>>> work. I won;t go into it all again but I am so mad I can't express it.
>>> None
>>> of the many fixes have worked and I have rpeatedly tried them all. Yo
>>> can
>>> read about this allin my post; I do not want to be redundant.
>>> I am having morero problems than validtion issues...these are major
>>> malicious pop ups that will not go away nor allow me to stop trying to
>>> remove them for a second. C BIRDWISE. I am running ESET andd ran Nod 32
>>> and
>>> did an indepth etc etc etc I am not infected...I do not need Microsft's
>>> anti virus software. I need to get ri of Microsoft's spyware....
>>>
>>> "Carey Frisch [MVP]" wrote:
>>>
>>>> Windows Genuine Advantage Notification (KB905474) does not cause
>>>> any problems unless, of course, you happen to be using a non-genuine
>>>> version of Windows. This particular update was not designed to be
>>>> uninstalled.
>>>>
>>>> --
>>>> Carey Frisch
>>>> Microsoft MVP
>>>> Windows - Shell/User
>>>> Microsoft Community Newsgroups
>>>> news://msnews.microsoft.com/
>>>>
>>>> ---------------------------------------------------------------------------­----------------
>>>>
>>>> "Larry Mauriello" wrote:
>>>>
>>>>> I have read this *update* causes problems. I marked it 'removed' in
>>>>> Windows Update but It shows w/the Yellow(!)
>>>>> saying I have chosen to Hide an Important update. Do I just ignore
>>>>> this
>>>>> or
>>>>> install it?
>>>>>
>>>>> I alos for some reason have 2 'Programs' listed in Start/All Prgrams
>>>>> list. 1 says Windows Update, the othe MS Update.
>>>>> Properties are not the same yet both go to the same web site. I am
>>>>> guessing it is ok to remove on. I mean they are just shortcuts
>>>>> anyway, right?