It will also pop up a dialog that says “This copy of Windows is not Genuine”
“This copy of Windows is not genuine and you have not yet resolved this issue. This computer is no longer eligible to recieve select security upgrades from Microsoft.
To protect your copy of Windows, you must click Get Genuine now.”
Every so often a little balloon will pop up that says “You may be a victim of software counterfeiting.” Below that it will say “This copy of Windows is not genuine. Click this balloon to resolve now.” If you’re working on a system that has this running it gets annoying in a hurry. What the time interval between pop-ups is, I don’t know, but I imagine it’ll drive most people to buy a legit key after a while just to get the thing to shut up.
Fixing the popup is easy enough.
Reboot to safe mode. Open up HijackThis and scroll down to the selection that says “020 – Winlogon Nofity: Wgalogon – …” select that, and click fix checked.
You can also go and delete the actual executable that nags you. The full path to it should be (for most installs) C:\Windows\System32\wgatray.exe.
Reboot after this. No longer should you get the popups and that nagger as you log in should not show up either.