Windows Piracy Control

[Fang_san]

Starting up a PC as normal a window appears upon booting Windows XP. It stats
that the verson of XP was activated by another user and it then asks the
software be reactived. Nothing has been added or removed Hardware or OS wise
since the PC was brought 2002.

To activate the window message is asking for billing infomation such as
credit card and atm numbers. A credit card was not used to purches the PC and
there are no options to active by phone.

Trying to boot into safe mode or any other mode causing the PC to shut down
before Windows can start and closing the window causes the PC to reset.

Can anyone give any advice or confirm if this is a genuin MS Piracy Control
mesaure as to me it seems supect. Cheers.

 

[Maincat]

"Fang_san" <Fang_san@discussions.microsoft.com> wrote in message
news:CE32A706-32E6-4331-BD7B-935F4D75DE66@microsoft.com...
> Starting up a PC as normal a window appears upon booting Windows XP. It
> stats
> that the verson of XP was activated by another user and it then asks the
> software be reactived. Nothing has been added or removed Hardware or OS
> wise
> since the PC was brought 2002.
>
> To activate the window message is asking for billing infomation such as
> credit card and atm numbers. A credit card was not used to purches the PC
> and
> there are no options to active by phone.
>
> Trying to boot into safe mode or any other mode causing the PC to shut
> down
> before Windows can start and closing the window causes the PC to reset.
>
> Can anyone give any advice or confirm if this is a genuin MS Piracy
> Control
> mesaure as to me it seems supect. Cheers.

Do not give out any bank details, PINs, passwords etc. This is a fake.
Call MS customer support.

 

[Patrick Keenan]

"Fang_san" <Fang_san@discussions.microsoft.com> wrote in message
news:CE32A706-32E6-4331-BD7B-935F4D75DE66@microsoft.com...
> Starting up a PC as normal a window appears upon booting Windows XP. It
> stats
> that the verson of XP was activated by another user and it then asks the
> software be reactived. Nothing has been added or removed Hardware or OS
> wise
> since the PC was brought 2002.
>
> To activate the window message is asking for billing infomation such as
> credit card and atm numbers.

This is a clear indication of an attempt to defraud you.

*No* Geniune Windows Validation notifications ask for this information.

> A credit card was not used to purches the PC and
> there are no options to active by phone.

Another clear indication of a scam.

> Trying to boot into safe mode or any other mode causing the PC to shut
> down
> before Windows can start and closing the window causes the PC to reset.
>
> Can anyone give any advice or confirm if this is a genuin MS Piracy
> Control
> mesaure as to me it seems supect.

This is far beyond suspect, and you are right to be wary.

> Cheers.

Stop here. If you gave out any of this information, contact your bank and
credit card providers *immediately*.

Cancel all the cards, have new ones sent, and have watches put on your
accounts. Otherwise, you may be liable for losses. Further, for the
next while, keep close watch on your bank statements.

Do contact the police; they will have a contact for computer fraud. It's
important to follow this through.

Also contact Microsoft customer service, as their legal department will
likely be interested in the misuse of their name.

While this will prolong the inconvenience, wait to remove the infection
until you find out if the scam windows provide any tracing information.

HTH
-pk

 

[Fang_san]

"Patrick Keenan" wrote:

>
> Stop here. If you gave out any of this information, contact your bank and
> credit card providers *immediately*.
>
> Cancel all the cards, have new ones sent, and have watches put on your
> accounts. Otherwise, you may be liable for losses. Further, for the
> next while, keep close watch on your bank statements.
>
> Do contact the police; they will have a contact for computer fraud. It's
> important to follow this through.
>
> Also contact Microsoft customer service, as their legal department will
> likely be interested in the misuse of their name.
>
> While this will prolong the inconvenience, wait to remove the infection
> until you find out if the scam windows provide any tracing information.
>
> HTH
> -pk

No info has been given out. I was waiting to hear from people here before I
even did anything more. Hearing what you have said calls have been made to
the police but not MS yet. I've managed to get around it by entering a false
detials and am now running virus/spy checks. Will update you on what I find.
Again cheers for your help.

 

[David B.]

This malware is actually fairly old, I read about it a month or 2 ago but
can't recall where.

--

----
Crosspost, do not multipost http://www.blakjak.demon.co.uk/mul_crss.htm
How to ask a question http://support.microsoft.com/kb/555375
How to Post http://www.dts-l.org/goodpost.htm
_________________________________________________________________________________


"Fang_san" <Fangsan@discussions.microsoft.com> wrote in message
news:92679783-4FBA-44D7-BFDD-D039D8431BCB@microsoft.com...
>
>
> "Patrick Keenan" wrote:
>
>>
>> Stop here. If you gave out any of this information, contact your bank
>> and
>> credit card providers *immediately*.
>>
>> Cancel all the cards, have new ones sent, and have watches put on your
>> accounts. Otherwise, you may be liable for losses. Further, for the
>> next while, keep close watch on your bank statements.
>>
>> Do contact the police; they will have a contact for computer fraud.
>> It's
>> important to follow this through.
>>
>> Also contact Microsoft customer service, as their legal department will
>> likely be interested in the misuse of their name.
>>
>> While this will prolong the inconvenience, wait to remove the infection
>> until you find out if the scam windows provide any tracing information.
>>
>> HTH
>> -pk
>
> No info has been given out. I was waiting to hear from people here before
> I
> even did anything more. Hearing what you have said calls have been made to
> the police but not MS yet. I've managed to get around it by entering a
> false
> detials and am now running virus/spy checks. Will update you on what I
> find.
> Again cheers for your help.