WGA Validation Tool (XP Home SP2)

Topic

New Reply

I have been following the advice from Windows Secrets Newsletter regarding dumping Windows Update and using alternatives (the recommended Shavlik’s NetChkPro is installed but giving me problems, will have to check with them for support). When I checked my system, I am happy to say the WGA Notification Tool was not installed on my main computer. I still have two other systems to check on, but I was wondering….

I do have the WGA Validation Tool installed on my system, does this also pose any threat as the Notification Tool does and if so, how do you remove it?

My system has Windows XP Home SP2 installed with a 2.0 GHz AMD Athlon processor on a ASUS mobo with 1 GB RAM

Thanks for any help

Andrew

Reply | Quote

Replies

Using Windows Update, the WGA Validation tool is necessary – without it, you won’t be able to install regular updates for Windows and Office, only critical security updates. I don’t know how other tools work if WGA Validation is not present.

The WGA Notification Tool has just been replaced with a somewhat less intrusive version, see here on AskWoody.com.

Reply | Quote

I find WGA convenient for selecting updates. Is there any harm in leaving it alone if I just get my firewall to block it efforts to contact the net?

Reply | Quote

I’m not sure, but it seems logical that WGA Validation cannot work at all if it cannot contact Microsoft. But you could try it and see what happens.

Reply | Quote

I didn’t really consider that. I just visited the Windows Update site and it let me see and download all available updates, critical and others. I have Zone Alarm blocking WGA from contacting the Internet

Reply | Quote

OK, that’s fine then. Good to know!

Reply | Quote

Just out of curiosity, how do you block the WGA validation tool with ZA?

I have no problem myself; my version of WGA validation tool is from March (some 1.5 version). At the moment, I have no plans in updating it as I do not use it.

As I do not have the later version of WGA Validation tool, I do not know if it works differently when connecting. As with other Microsoft tools, programs (MS Defender etc.) MS uses the “Generic Host Process for Win32 Services” (svchost.exe) to connect to the Internet. If the WGA Validation tool uses the Generic Host Process, it would be hard to block the tool without blocking all Internet access.

Reply | Quote

No – it’s really very easy. When you have ZoneAlarm ‘Smart Defense Advisor’ ( on the Program Control tab) set to Manual (and I would always suggest this), it will alert you the first time a program asks to do something ‘iffy’, like contacting the Internet. You can select ‘Block This Time’ or ‘Always block’ These decisions can be reversed later. If you had Smart Defense set to Automatic, which is the installation default, you can check the Program Control, Programs tab and set it to always ask in future

Reply | Quote

David,
What version of ZA do you have?
I see no mention of Smart Defense Advisor on my program tab. ( or anywhere else )

Reply | Quote

Hi again Bob,
I’m not David, and I think he should also answer since not being clear enough just mentions ZoneAlarm.

Anyhow, I, as you can guess, do not either have this Smart Defense Advisor. I did a search at the Zone Labs site; Smart Defense Advisor seems to be introduced in the 6.5 release and furthermore included in ZA Internet Security Suite (maybe ZA PRO and some more).

Reply | Quote

6.5 ZA Security Suite. Smart Defense Advisor has been around for several versions back. It is simply a case of ZA deciding a program is safe, from its built in rules, or asking you. In any case, on the Program Control/Programs tab you can control access it give to any program asking for connection. It is basically the same with, say, Norton, which I used to use, but I find ZA easier to use, and Tech Support actually taok to you!

Reply | Quote

OK, but you do not mention what program or process is asking for connection. Your explanation of this SDA is so general that it could be a description of the normal ZA program control.

The Windows Genuine Advantage validation tool is an Internet Explorer ActiveX control, OK? So if I may reiterate my question: what component is it that you are blocking and how does it look in ZA when this happen? You have only said that you can use SDA for this and described how SDA works (similar to normal program control, i.e. rules).

So you are saying that when you try to download something that requires a validation that works OK and no validation occurs since ZA is blocking WGA’s access to the net?

Reply | Quote

The program is listed by ZA as “System32/WgaTray.exe” The point here is that at no time did I need to know that. I only needed to respond to an automatic alert that “Windows Genuine Advntage is trying to access the Internet” The name of the program was offered with details on where it was located, if I cared to query the alert for such further details.

Reply | Quote

OK. Of course, you only needed to respond to the alert, I just asked for what program you later found responsible for the alert.

Thanks.

Reply | Quote

Like many, I don’t understand what WGA does, or if there is a program other than WgaTray.exe that is doing sometning nasty, but at least I have stopped the one I can see!

Reply | Quote

Just to try it, I manually blocked WGATray.exe in the programs tab of ZA. Then checked Windows Update and it appeared to run as it’s supposed to do.
So I’ll leave it blocked so it can’t phone home. Good information.

Reply | Quote

Now that everyone is happy about having Microsoft examining their software, maybe it’s time to ask about what Microsoft might be doing with their data.

Reply | Quote

There are a LOT of programs out that check for updates daily, how do we know if they are checking on our legal copy or not?
Microsoft is NOT alone with this at this time I have about ten programs that want to check for updates daily or every time I use the program. True some of them you can turn OFF the check for updates, but the settings are buried and not easy to get to.

Then there is AOL and other IM programs or some of the “Ipod” software. Have you ever tried turning off all their crap?

DaveA I am so far behind, I think I am First
Genealogy....confusing the dead and annoying the living

Reply | Quote

Just don’t use AOL or ipods. No problem there for me at least. Same with cell phones.

Reply | Quote

David,
OK, so this Smart Defense Advisor (SDA) has its own little set of rules. Maybe my question was not clear. What component / program is it that SDA gets upset about? What do you block with SDA in this case?

Reply | Quote

Ironically, my initial question has not been answered, although there have been some really good suggestions and information along this thread.

I am aware that Windows Update will not function without the WGA Validation Tool. That is why a third party update software was recommended by Brian Livingston. The latest series of updates regarding WGA Notification Tool fall into the realm of spyware, as far as I am concerned, and therefore I have followed the suggestion from Brian Livingston from the latest issue of Windows Secrets Newsletter to disable Automatic Updates and remove the Notifications Tool from my system manually.

My question was whether WGA Validation Tool possed the same threat as the WGA Notifications Tool in terms of spyware behavior.

Thanks again for any input

Andrew

Reply | Quote

I can’t answer your question, but I am interested to know whether other people are using Windows Update, or are following the guidance that you are.

I am still using Windows Update. I fully agree with you about how undesirable its behaviour is, but I have too many vulnerable PCs to be able to spend the time doing manual updates on all of them.

Are you still using Windows Update
Yes, and WGA is installed and talking to Microsoft
Yes, but I have prevented WGA talking to Microsfot (for example using a software firewall)
No, I no longer use Windows Update because I don’t like WGA
No, I never did use Windows Update, I prefer to manage my own patches

StuartR

Reply | Quote

I’m using Microsoft Update (not Windows Update) and feel the same way. I’m disgusted that Microsoft chose this method to foist this software on us. However, all the software I use at work & home is legal so barring undocumented features (aka: bugs) I really don’t much care about it. I’ve got much better (??? ) things to worry about.

Joe

--Joe

Reply | Quote

Joe,
i agree with you about MS and their method but I also do use WU since all my software is legit, so let them do their thing.
I can imagine the HUGE amount of piracy of their product and can understand their attempts to limit it in some way.

Reply | Quote

All of my software is legit as well. I am very particular about legal use. I am not dealing with manual updates as yet. In following with the advice from Brian Livingston, I will be using a third party patch management software called Shavlik’s NetChkPro. It has many great reviews and is now part of the Security Baseline of recommended products from Windows Secrets Newsletter. And, yes there is a license fee for full use of the software.

Maybe I’m being too reactionary. I am a long-time MS user and rely on their products to serve my needs. I have long been frustrated by the MS mindset regarding product testing, patch updates, and security issues. While I have become moderately knowledgeable regarding computers and software over the years, I still refer to those of greater experience and know how. That’s the reason I keep an eye on Woody’s Lounge, associated newsletters, and sources.

Andrew

Reply | Quote

I have just been informed that Shavlik’s NetChkPro only works with Windows XP Pro. In their system requirements on their website for this software it only lists Windows XP and does not distinguish between Home or Pro editions. The specific requirements are listed in the help file for the program itself. This means that I will be stuck dealing with Windows Update and WGA. This is very disappointing.

Thanks to those who posted how they block WGA from contacting MS through their firewall. I’ll have to make those same adjustments as well. Sometimes it really looks like the software industry is out to get the homeuser by making things more difficult for us to accomplish things.

Andrew

Reply | Quote