Thread: WgaLogon.dll
View Single Post
Old 26-04-2006, 21:30   #1
grubbymitts
cf.geek
 
grubbymitts's Avatar
 
Join Date: Mar 2005
Posts: 534
grubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quadsgrubbymitts has a fine set of Quads
WgaLogon.dll

This morning (26th April) my PC flashed up the little update shield in the tray. It said updating - 10% and then disappeared. Hmm, methinks, so I went to the Windows update page and it appears that Microsoft were sending two out of course updates. One was the Windows Genuine Advantage tool and the other was a security update.

So I downloaded them both. Now, I know that this XP is legit as the machine is a Compaq Presario that I bought from PC World last August with XP Home SP2 on it.

I check Hijackthis as I always do everyday just before I turn the PC off and notice this little entry added:

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

Hey up, what's that? I checked online and CastleCops says it is a legit file: Windows Genuine Advantage Logon or something. Everything else on the google search just pulls up loads of Hijackthis posts, but this site:

http://forum.ccleaner.com/lofiversio...php/t4050.html

has an interesting reference on one of the replies to the original poster:
Code:
Wgalogon.dll is showing in your log in the 020 area, this is a genuine Microsoft file (Windows Genuine Advantage)
 but as far as I know it should only appear if you have an illegal or pirated copy of windows, With you having SP2 
installed I'm really not sure why that is showing, its not a threat so nothing to be worried about but you could contact 
MS if you notice any problems and ask why its present in the log.
Blow me if the mighty MS think I'm a doity seafaring buccaneer!

Anybody else share some light? Paul, perhaps?
I have emailed MS, but still waiting for their reply.
grubbymitts is offline   Reply With Quote