It is for the App Store; not iTunes. So this is the app store for the Mac, not for the iPod, iPad and iPhone.
So no need to jailbreak your Apple computer
It is MS related. Why? Because if I look at all the strings in the file, I can see:
- Many links like : "http://go.microsoft.com/fwlink/?LinkId=62548" - Some notifications to buy Genuine Software : "DaysBeforeBuyNowNongenuine=%d" - And a Verisign signature : "http://crl.verisign.com/tss-ca.crl" "Copyright(c)1997MicrosoftCorp.1" "Copyright(c)2000MicrosoftCorp.1"
When I said to Sygate to block it, after one minute it simply close itself so I don't understand why yours keeps restarting. Maybe try running in Safe Mode. And don't rename everything lol. Maybe you renamed some DLL that were registered. I simply renamed ONE.exe and it never got back.
I didn't check the packets sends, but I opened the file "WgaTray.exe" with an HexEditor and it seems to only communicate trought web page. I found some text too:
Some Strings From The File Reduced reminders = %s Disabled = %s DaysBeforeBuyNow Nongenuine = %d DaysBeforeBuyNow Unactivated = %d Show notification for every %d logins Balloon interval = %d hours
So it seems that if it thinks that you don't own a good copy, you will have some trouble after sometime to run windows. In bref, the only Advantage of the Genuine Advantage is to be able to use Windows.... O JOY!!!
My Sygate got the beast on the fly and there wasn't any registry key that started it... So I couldn't block it from starting at each boot. So I simply renamed the file and I have not any trouble since that:D
The file is in the system32 directory and the filename is : "WgaTray.exe". I simply renamed it:"WgaTray.bak" and it left my alone:D
It is for the App Store; not iTunes. So this is the app store for the Mac, not for the iPod, iPad and iPhone. So no need to jailbreak your Apple computer
It is selling at the price of an external drive. So, it's really not interesting... but for them!
It is MS related. Why? Because if I look at all the strings in the file, I can see:
:D
- Many links like : "http://go.microsoft.com/fwlink/?LinkId=62548"
- Some notifications to buy Genuine Software : "DaysBeforeBuyNowNongenuine=%d"
- And a Verisign signature : "http://crl.verisign.com/tss-ca.crl" "Copyright(c)1997MicrosoftCorp.1" "Copyright(c)2000MicrosoftCorp.1"
Maybe a MS spyware
When I said to Sygate to block it, after one minute it simply close itself so I don't understand why yours keeps restarting. .exe and it never got back.
Maybe try running in Safe Mode.
And don't rename everything lol. Maybe you renamed some DLL that were registered. I simply renamed ONE
I didn't check the packets sends, but I opened the file "WgaTray.exe" with an HexEditor and it seems to only communicate trought web page. I found some text too:
U pdate
Some Strings From The File
Reduced reminders = %s
Disabled = %s
DaysBeforeBuyNow Nongenuine = %d
DaysBeforeBuyNow Unactivated = %d
Show notification for every %d logins
Balloon interval = %d hours
SOFTWARE\Microsoft\Windows\CurrentVersion\Windows
So it seems that if it thinks that you don't own a good copy, you will have some trouble after sometime to run windows. In bref, the only Advantage of the Genuine Advantage is to be able to use Windows.... O JOY!!!
My Sygate got the beast on the fly and there wasn't any registry key that started it... So I couldn't block it from starting at each boot. So I simply renamed the file and I have not any trouble since that :D
:"WgaTray.bak" and it left my alone :D
The file is in the system32 directory and the filename is : "WgaTray.exe". I simply renamed it
Hope this help. Chow