Ylli Blu-wgaTray.exe

[benseven11]

Ylli Blu-wgaTray.exe
Microsofti per te luftuar piracine e kopjeve te windows xp,ka futur ne azhurnimet e fundit edhe nje skedar WgaTray.exe Ky skedar me instalim,nxjerr nje ikone yll blu ne cep poshte djathtas ekranit,i cili nuk mund te hiqet.Nuk hiqet me klik te djathte te ikones.Nuk ka opsion per heqje.Ne qofte se shkohet ne Taskmanaxher.Tek proceset edhe sikur te provohet te vritet ky proces,ikona zhduket per nje moment,pastaj rishfaqet prape.procesi whatray.exe rishfaqet prape ne taskmanaxher,megjithese e vret.Ne qofte se shkon ne start/kontroll panel/add remove programs,mund te shihet si skedar i instaluar si"windows genuine advantage notifications"kb 905474.
Nuk ka opsion aty per ta hequr wga.Nuk hiqet.Sigurohu qe ne dritaren e add remove program te klikohet ne katrorin e vogel"show updates,per ti futur shenjen e v-se.Gjithashtu anash saj,tek 'sort by"zgjidhet ne menu"Last date used"

Per ta caktivizuar kete proces ndiqet kjo rruge:

1.Si fillim duhet qe kompjuteri te tregoje te gjithe skedaret e fshehur dhe perkohsisht te caktivizohet opsioni"simple file sharing.Klikohet dy here ne ikonen"my computer".Ne dritaren tjeter,klik ne tools/folder options/view.Te lista klik te rrethi perpara"show hiden files"(trego skedaret e fshehte)Ne qofte se rrethi eshte bosh,i vendoset pike me miun.Nqs rrethi e ka piken brenda,lihet ashtu sic eshte.Pak me poshte,tek "Hide protected sistem files"katrori perpara duhet te jete bosh.Nqs ka shenje v,je klik te v-ja per ta pastruar katrorin.Ne fund te listes do shohesh"use simple file sharing".Katrorit te vogel perpara ja heq shenjen e V-se.Nqs katrori eshte bosh,lihet ashtu sic eshte.Klikohet poshte ne apliko dhe ok.Mund te provohet cinstalimi i skedarit te azhurnimit te wgaTray duke shkuar ne Start/search.Ne kerkim futet $NtUninstallkb905474.Aty duhet pare.Te rezultati,nqs del klikon per ta hapur dhe cinstaluar kete azhurnim.Ne qofte se nuk del asgje ne rezultate,vazhdohet me poshte.




2.Klik start/search.Futet per kerkim wgaTray.exe Tek rezultatet do shfaqen keto skedare:
WINDOWS\system32\WgaLogon.dll
\WINDOWS\system32\WgaTray.exe
\WINDOWS\system32\LegitCheckControl.dll
Klikohet me te djathte te cdo skedar me lart dhe zgjidhet ne menu"delete on next boot"Ky skedar eshte pjese e sistemit dhe nuk mund te hiqet me nje klik i djathte dhe hiq.Duhet qe kompjuteri te kete te instaluar programin falas "move on boot" qe ben te mundur heqjen e ketyre skedareve,kur kompjuteri do ristartohet.Move on boot fut ne menune e klikut te djathte opsionin,hiq ne ristartim.
"delete file(s) on next boot)"Pikerisht ky opsion zgjidhet per te hequr skedaret me lart.Ne qofte se nuk ke kete program,atehere provo te ristartosh komjuterin.Ne momentin kur komjuteri ben boot
mbaj shtypur F8.Do futesh ne windows ne safe mode.Bej nje kerkim per skedarin wgaTray.exe dhe i heq pa problem.
Duhet shtuar qe megjithese skedaret me lart u hoqen,perseri po te shkosh ne kontroll panel/add remove programs,skedari i azhurnimit qe ka wgatray.exe,"windows genuine advantage notifications" eshte aty.


3.Duhet hequr WgaLogon.dll.Shkohet ne start/search/WgaLogon.dll Te rezultati i kerkimit klikohet me te djathten ne WgaLogon.dll dhe zgjidhet"properties". Klik ne "security".Klik "Advanced".Aty pastro katrorin poshte,perpara"inherit from parent..."Te dritarja qe do hapet,klik kopjo dhe ok.Te lista e perdorusave,nen"name",shiko kush ka anash privilegje"read and execute", si ne figuren poshte.Klikohet nje here te ai emer qe te kthehet ne blu.Me pas kliko poshte ne butonin"remove"Emrat e tjere qe nuk kane "read and execute",por "non inhertited" full,modifiko, status ne liste anash,nuk ngacmohen.Lihen ashtu sic jane.Klikon poshte apliko dhe ok.
Te rezultatet e kerkimit qe u bene ne kete pike 3,u klikohet me te djathte skedareve WgaLogon.dll dhe zgjidhet ne heqje "delete on next boot"Ose hiqen ne windows safe mode,permendur me lart.Gjithashtu shkohet start/search dhe kerkohet per spmgs.dll dhe hiqet.Skedari i instalimit te wgatray.exe ndodhet ne direktorine C:\WINDOWS\SoftwareDistribution\ Download\ Klik te folderi3c20c3d0758f4aa.. Ne dritaren tjeter klik ne update.Do shohesh update exe.Klik i djathte dhe hiqet.Gjithashtu klik i djathte ne wgacustom.dll dhe hiqet. Aty eshte edhe nje skedar .inf.Hapet me notepad dhe gjenden te gjitha vendet ne regjister ku wgaTray ka futur celesa dhe duhen hequr.I kam vene me poshte


4.Duhen hequr keto celesa ne regjister.Klikohet start/run regedit.
H_Key_Local Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon Hiqet Wgalogon.
HKCR,AppID\{2DE6426A-0708-415C-8C19-623CC4855F80},,0,"LegitCheckControl"
HKCR,AppID\LegitCheckControl.DLL,"AppID",0,"{2DE6426A-0708-415C-8C19-623CC4855F80}"
HKCR,LegitCheckControl.LegitCheck.1,,0,"Windows Genuine Advantage Validation Tool"
HKCR,LegitCheckControl.LegitCheck.1\CLSID,,0,"{17492023-C23A-453E-A040-C7C580BBF700}"
HKCR,LegitCheckControl.LegitCheck,,0,"Windows Genuine Advantage Validation Tool"
HKCR,LegitCheckControl.LegitCheck\CLSID,,0,"{17492023-C23A-453E-A040-C7C580BBF700}"
HKCR,LegitCheckControl.LegitCheck\CurVer,,0,"LegitCheckControl.LegitCheck.1"
HKCR,CLSID\{17492023-C23A-453E-A040-C7C580BBF700},,0,"Windows Genuine Advantage Validation Tool"
HKCR,CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\ProgID,,0,"LegitCheckControl.LegitCheck.1"
HKCR,CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\VersionIndependentProgID,,0,"LegitCheckControl.LegitCheck"
HKCR,CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\InprocServer32,,0,"%11%\legitcheckcontrol.dll
HKCR,CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\InprocServer32,"ThreadingModel",0,"Apartment"
HKCR,CLSID\{17492023-C23A-453E-A040-C7C580BBF700},"AppID",0,"{2DE6426A-0708-415C-8C19-623CC4855F80}"
HKCR,CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\TypeLib,,0,"{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}"
HKCR,TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0,,0,"Windows Genuine Advantage Validation Tool"
HKCR,TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0\FLAGS,,0,"0"
HKCR,TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0\0\win32,,0,"%11%\LegitCheckControl.dll"
HKCR,TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0\HELPDIR,,0,"%11%\"
HKCR,Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD},,0,"ILegitCheck"
HKCR,Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}\ProxyStubClsid,,0,"{00020424-0000-0000-C000-000000000046}"
HKCR,Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}\ProxyStubClsid32,,0,"{00020424-0000-0000-C000-000000000046}"
HKCR,Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}\TypeLib,,0,"{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}"
HKCR,Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}\TypeLib,"Version",0,"1.0"
;Hook up WgaLogon.dll
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Logon",0,"WLEventLogon"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Logoff",0,"WLEventLogoff"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Startup",0,"WLEventStartup"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Shutdown",0,"WLEventShutdown"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "StartScreenSaver",0,"WLEventStartScreenSaver"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "StopScreenSaver",0,"WLEventStopScreenSaver"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Lock",0,"WLEventLock"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Unlock",0,"WLEventUnlock"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "StartShell",0,"WLEventStartShell"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "PostShell",0,"WLEventPostShell"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Disconnect",0,"WLEventDisconnect"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Reconnect",0,"WLEventReconnect"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Impersonate",0x10001,1
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "Asynchronous",0x10001,0
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "SafeMode",0x10001,0
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "MaxWait",0x10001,0xFFFFFFFF
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon, "DllName",0x20000,"WgaLogon.dll"
;Add ARP entry
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"InstallLocation",20000,"%SYSTEMROOT%\system32"
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"HelpLink",,%HelpLink%
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"URLInfoAbout",,%URLInfoAbout%
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"Publisher",,%Publisher%
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"DisplayName",,%SP_TITLE%
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"DisplayVersion",,%PRODUCT_VERSION%
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"VersionMajor",,2
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"VersionMinor",,0
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"ParentKeyName",0,"OperatingSystem"
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"NoRemove",0x10001,1
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"NoModify",0x10001,1
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"NoRepair",0x10001,1
HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\WgaNotify,"UninstallString

Ne direktorine C:\WINDOWS\SoftwareDistribution ndodhet nje skedar "reporting events.log" Po te hapet me notepad jepet historia e azhurnimeve automatike.