Windows Activation

[Artimus Prime]

Hey all you computer experts!!1

 

OK, I am not a dumbass when it comes to computers and I have removed my share of viruses and malware from my computer and lots of other peoples computers. I have now come across the ultimate virus. This one has my computer completely locked up.

 

At least I think it is a virus.

 

This virus or what ever you want to call it is a Windows Activation screen. It says my windows has been activated on another computer and I have to verify that my copy is legit!!!

 It wants me to fill in a credit card number, email, even the three digit number in the back which is a verification number for the card!!! I am calling bullshit  on this one!!!

 

I have a separate hard drive for a business on my computer and at this point it is the only way I can get on the internet since the other drive is prtetty well messed up...

 

Has anyone ran into this before and if so how did you get rid of it ???

 

I have run MalwareBytes and it found 27 items but it did not fix it.

 

Any help will be appreciated.

 

Thanks,

Artimus

 

[Labob]

so what antivirus you using

tell us you never click on ok

 

 If all that is true you should just delete all your cookise and cache and life shouldbe good. if not boot into safe mode with networking  and go to  http://housecall.trendmicro.com/ run that.

 

 The other way is to remove your antivirus "completely" and go install http://www.microsoft.com/security_essentials/default.aspx it will find what you got and remove it. Thats what I do for the kids.

[greywolf2]

I d alot of cleaning on friends pc---- best place to go is to

http://www.bleepingcomputer.com/forums/index.php?

Register a account and D/L hijackthis.

Run hijackthis and copy the log it gives you to this forum

http://www.bleepingcomputer.com/forums/forum22.html

Do no remove or try and attempt to fix anything with the program hijackthis.  It can if you remove the wrong stufff crash your pc.....    They are a bunch of volunteers and they will get your pc all fixed up.....

[WolfTiS]

Good call Greywolf2. I agree with you completly.

[ROCKAPE]

I think you will fix it with this

 

http://www.combofix.biz/

 

This will not do any harm and it has worked for similar cases such as yours many times.

[greywolf2]

Combofix is a great repair tool also----But again i caution you to read the statement on the front page of combofix   Unless you know what your doing be very cautious as to what you repair....... I use it as i do know the ins and outs of it as i am sure others do.....

[Tball]

If you use HiJackThis try this site http://hjt.networktechs.com/ you just cut and paste your log file in the box and it tell you right away what to remove

[Labob]

This crew of pc repair gurus need to get together and come up with a team answer for this. There are 100 of ways to do this and it is confusing to the folks who don't have the know how.

[RuStY]

Everyone has thier way to do things & thier software they use, use what floats your boats & stay off the porn sites & you will be fine.  jk

 

I dont take chances with weird viruses, Ill format right away rather than play with the problem all day. FORMAT_C: is the best way to get rid of a nasty virus   I use mirrored drives, so I always have a backup.

 

All the IT guys I know say , if you want free virus software use the one microsoft offers for free. If you want really bitchin virus software spend a few hundred bucks.  just my 2 cents.

[PHUCKITMAN]

HEY ATRI MY RECOMENDATION AFTER HAVING GOT A SERIOUS VIRUS AROUNF THE FIRST OF THE YEAR IS POST A PHONE NUMBER YOU CAN BE REACHED AT. 1 OF THESE GUYS WILL CALL YOU I AM SURE AND WALK YOU THRU THE CORRECT FIX FOR WHAT YOU HAVE.. YOU MAY CONSIDER CROSS-LOOP AFTER YOU GET ACCESS TO YOUR SYSTEM AGAIN TO MAKE SURE IT IS COMPLETLY GONE. ROCKAPE AND I DID ONE AND IT CAME BACK AND GOT TO BURIED TO REMOVE HAD TO REFORMAT IN MY CASE..GOOD LUCK AND CALL ME WITH ANY QUESTIONS I CAN HELP WITH. BTW I LOOKED UP THE WINDOWS ACTIVATION AND SAW LIGIT IMAGES OF THE CREDIT DARD INFO SCREEN AND IT APPEARS AS YOU DISCRIBED INCLUDING THE 3 DIGIT NUMBER ON THE BACK...

[7Toes]

THAT SOUNDS LIKE A SCAM I WOULD NOTIFY MICROSFT OF THE SCAM SEE WHAT THEY SAY JUST STOP GOING TO THOSE PORN SITES AND IT WILL STOP LOL J/K

[Hickeydog]

Have you tried booting into safe mode and running Anti-Malaware?

[NickTheGrip]

It is in fact a hacker trying to get your credit card information. One of the answers I found  on line was to actually input a bunch of bogus information, which seems like a cool idea to screw with the assholes responsible for this piece of shit, but I would not recommend this.

 

for my 2 cents, the drive reformat with an image backup is simply the best way to go, and by far, the simplest.

The best software for this, which I use religiously is Acronis. It costs a little money, but I figure my time is worth more.

A reformat and reload of the image only takes a couple of hours, in fact, I usually perform this step around once every couple of months just to be sure, and my piece of shit computer runs smooths as a baby's bum pretty much all the time (except when I get into "tweaking" mode and screw something up)

Any program that "cleans" malware and spyware off your computer is not 100% foolproof and is only as good as the people programming it trying to keep up with the tards and assholes who create this shit. They will always be one step behind as they are reacting to new stuff being created, not the other way around (although, in my opinion, they do one hell of a job trying to keep up)

 

Again - my two cents for what it's worth

[Cavey]

http://uksbsguy.com/blogs/doverton/archive/2007/05/15/windows-hacktivation-or-activation-trojan-horse-phishing-scam.aspx

 

http://www.symantec.com/security_response/writeup.jsp?docid=2007-042705-0108-99&tabid=2

[Labob]

seriouslly slapping my head against the wall here