Welcome to RCF - WHF

rb2d2 · Sep 25, 2004

Trojan impersonates Windows activation

Here's the scam. The Trojan installs itself onto a PC and presents the user with the following message:

Your copy of Windows has been activated by another user.
To help reduce software piracy, please re-activate your copy of Windows now.
WE will ask for your billing details, but your credit card will NOT be charged.
You must activate Windows before you can continue to use it.
Microsoft is committed to your Privacy. For more information, www.microsoft.com/piracy.
Do you want to activate Windows now?

It looks pretty convincing too

If users select "No," the PC shuts down while clicking "Yes" takes the user to a second screen which asks for the victim's name and credit card details.

Shocked

Bobby · Dec 31, 2004

What's the cure for this?

rb2d2 · Sep 25, 2004

Symantec offers the following advice:

This Trojan teaches us all a good lesson - Trust No One. This is the slogan from the TV show The X-Files, and very much applies when it comes to protecting your personal information. Sometimes the creators of Trojans attempt to impersonate Microsoft, a bank, or even a government organization. Whatever the warning or message says, we must make very sure it is genuine before giving up any personal details, financial or otherwise. It's far better to doubt a genuine request until proper verification is provided, than it is to blindly place your trust in a communique simply because it appears to have come from a trusted source.

The best way to prevent this from happening is to keep you Virus Definitions up to date I would think. They don't seen to offer a cure. I guess you just don't type in the information.

binky

Karen · Jan 06, 2006

Ooh that's sneaky!!

Thanks for the heads up! Shocked

Katy · Sep 28, 2004

Oh Karen that baby is just more precious every time you post a pic...

Thanks RB