The German computer magazine CT...analyzed the new WGA Notification that is installed during Windows Update. They decided to cancel the installation and immediately after doing so the firewall reported that update.exe tried to connect to the internet. They used Wireshark to analyze the traffic and found out that update.exe sends data to genuine.microsoft.com...It sends registry information, namely the SusClientID as well as information about the version of the WGA tool, the windows version and the language of the operating system. It also sets a cookie which contains a GUID which could possibly be used to identify the computer...Microsoft confirmed...that data is send but it would only be used to optimize the service...