New scam detected by F-Secure

Kari

An Angry Old Man
Guru
VIP
SF Team
Local time
11:20 PM
Messages
17,473
Location
A Finnish ex-pat in Leipzig, Germany
F-Secure announced today they have detected a new type of scam, which mistakenly leads user to believe Windows has activation problems. Windows seems to require re-activation.

ransom_Trojan.Generic.KDV.153863_1.png


F-Secure said:
The trojan claims that "you should complete activation" and provides several phones numbers. While these numbers may look like generic service numbers, they aren't. They go to various countries ("00" is the prefix for international dialing). The countries are: São Tomé and Principe (239), Denmark (45), Madagascar (261) and Globalstar Mobile Satellite Service (8819).

Full story: Video - "Windows Activation" Ransom Trojan - F-Secure Weblog : News from the Lab



Kari
 

My Computer My Computer

At a glance

Windows 10 Pro x64 EN-GB1.6 GHz Intel Core i7-720QM Processor6 GBATI Mobility Radeon HD 5850 Graphics
Computer type
Laptop
Computer Manufacturer/Model Number
HP ENVY 17-1150eg
OS
Windows 10 Pro x64 EN-GB
CPU
1.6 GHz Intel Core i7-720QM Processor
Memory
6 GB
Graphics Card(s)
ATI Mobility Radeon HD 5850 Graphics
Sound Card
Beats sound system with integrated subwoofer
Monitor(s) Displays
17" laptop display, 22" LED and 32" Full HD TV through HDMI
Screen Resolution
1600*900 (1), 1920*1080 (2&3)
Hard Drives
Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm
External: 2TB for backups, 3TB USB3 network drive for media
Cooling
As Envy runs a bit warm, I have it on a Cooler Master pad
Keyboard
Logitech diNovo Media Desktop Laser (bluetooth)
Mouse
Logitech Performance Mouse MX
Internet Speed
50/10 Mbps VDSL
Antivirus
Windows Defender 4.3.9431.0
Browser
Maxthon 3.5.2., IE11
Good find Kari.

Tip : look at the spelling of the "license" in the image. It's a the classic grammatical error that should raise alarm bells.

The term license is a verb : as in "....our software is licensed using a dongle...."

The term licence is a noun : as in "....our software uses a dongle licence to......"

Strictly speaking, it should have stated "Windows licence locked!"
 
Last edited:

My Computer My Computer

At a glance

Windows 10 Pro x64 ; Xubuntu x64Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz16GB Corsair Vengance DDR3 @ 661 MHz Dual Cha...EVGA NVidia GTX 560 1024MB
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Golden Mk. I.4
OS
Windows 10 Pro x64 ; Xubuntu x64
CPU
Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz
Motherboard
Gigabyte P55A-UD3R Rev.1. Award BIOS F13
Memory
16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24)
Graphics Card(s)
EVGA NVidia GTX 560 1024MB
Sound Card
Realtek Integrated
Monitor(s) Displays
Dual Samsung SyncMaster 2494HS
Screen Resolution
1920*1080 and 1920*1080
Hard Drives
1*Samsung 840 EVO 120GB SSD;
1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
1*Samsung F1 SpinPoint 1TB;
2*Western Digital 1TB External USB 3.0
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0
PSU
Thermaltake ToughPower QFan 750W
Case
Thermaltake Element S VK60001W2Z
Cooling
Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans
Keyboard
Logitech G110
Mouse
Logitech MX518
The video mentions that the "unlock code" works, and is always the same - it is not unique for each infection. So there's no need to telephone if hit.

The code is :



Better tell Microsoft they have spelt it wrong then, Golden:

Good find Kari.

Tip : look at the spelling of the "license" in the image. It's a the classic grammatical error that should raise alarm bells.

The term license is a verb : as in "....our software is licensed using a dongle...."

The term licence is a noun : as in "....our software uses a dongle licence to......"

Strictly speaking, it should have stated "Windows licence locked!"

They always use License (n.) they also use Licence for certain documents intended for the UK audience.

Generally Microsoft Use "License, Licensed, Licensing" etc. in both noun and verb forms, since they are a US company and that is how it is spelt in the USA

In Australia, the equivalent term is something like "Fair Dinkum" meaning true, or genuine, I believe.
 
Last edited:

My Computer My Computer

At a glance

Win 7 Ult + Starter, XP Pro +Home, 2kAS, Linu...AMD 64 Athlon X2 , Intel Atom N450, Intel Cel...2.5GB ; 1GB; 2GBNvidia GeForce7000m; Intel; Intel
Computer Manufacturer/Model Number
Acer 7520, Packard Bell dot se, Acer travelmate 2423
OS
Win 7 Ult + Starter, XP Pro +Home, 2kAS, Linux Mint 8, SuperOS
CPU
AMD 64 Athlon X2 , Intel Atom N450, Intel Celeron M 1.50 Ghz
Motherboard
Acer Fuquene
Memory
2.5GB ; 1GB; 2GB
Graphics Card(s)
Nvidia GeForce7000m; Intel; Intel
Sound Card
Realtek AC57
Monitor(s) Displays
17" ;10.1"; 19"
Screen Resolution
1440x900;1024x600;1440x900;
Hard Drives
WD 80, WD 320;
PSU
19v
Case
Laptop
Cooling
Air
Internet Speed
9.7Mb/s down 0.99Mb/s up
Other Info
ISP VIRGINMEDIA 10M cable broadband - D-Link DIR615 wireless router, 3Com OfficeConnect ASDL router used as wireless extender switch
That's also told in the article. The unlock code seems always to be the same, which is quite understandable.
 

My Computer My Computer

At a glance

Windows 10 Pro x64 EN-GB1.6 GHz Intel Core i7-720QM Processor6 GBATI Mobility Radeon HD 5850 Graphics
Computer type
Laptop
Computer Manufacturer/Model Number
HP ENVY 17-1150eg
OS
Windows 10 Pro x64 EN-GB
CPU
1.6 GHz Intel Core i7-720QM Processor
Memory
6 GB
Graphics Card(s)
ATI Mobility Radeon HD 5850 Graphics
Sound Card
Beats sound system with integrated subwoofer
Monitor(s) Displays
17" laptop display, 22" LED and 32" Full HD TV through HDMI
Screen Resolution
1600*900 (1), 1920*1080 (2&3)
Hard Drives
Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm
External: 2TB for backups, 3TB USB3 network drive for media
Cooling
As Envy runs a bit warm, I have it on a Cooler Master pad
Keyboard
Logitech diNovo Media Desktop Laser (bluetooth)
Mouse
Logitech Performance Mouse MX
Internet Speed
50/10 Mbps VDSL
Antivirus
Windows Defender 4.3.9431.0
Browser
Maxthon 3.5.2., IE11
I always thought licence was the British spelling and license was the American spelling.

According to Google results, licence is a noun and license is a verb in British English and in American English, license is both.
 

My Computer My Computer

At a glance

Arch Linux 64-bit
OS
Arch Linux 64-bit

My Computers My Computers

  • At a glance

    7 X64i5 84002x8gb 3200mhz
    Computer type
    PC/Desktop
    OS
    7 X64
    CPU
    i5 8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200mhz
    Hard Drives
    various
    PSU
    pure power 11 400w cm
    Case
    Coolermaster
    Cooling
    cryorig m9i
  • At a glance

    7x64g54008gb ddr4 2400
    Computer type
    PC/Desktop
    OS
    7x64
    CPU
    g5400
    Motherboard
    ga b365m ds3h
    Memory
    8gb ddr4 2400
    PSU
    xfx pro 450w
well..how ever they spelled it, they always asked consumers to pay for it...doesnt it? :D

anyway..thanks for the info kari..this really alerts my attention..a friend of mine was actually hit with these virus..ive seen it, it was actually a wallpaper sort with writings about sending money etc etc..i couldnt open every program..in my frustration, as always the last option is to reformat the hardrive...which wipes everything..:(
 

My Computer My Computer

At a glance

MS Windows 8Intel Core i5 @ 2.27GHz Arrandale 32nm Techno...8.0GB Dual-Channel DDR3 @ 532MHz (7-7-7-20)ATI Mobility Radeon HD 4300 Series (Dell)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Dell inspiron 1564
OS
MS Windows 8
CPU
Intel Core i5 @ 2.27GHz Arrandale 32nm Technology
Motherboard
Dell Inc. 0M9XW4 (U2E1)
Memory
8.0GB Dual-Channel DDR3 @ 532MHz (7-7-7-20)
Graphics Card(s)
ATI Mobility Radeon HD 4300 Series (Dell)
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Generic PnP Monitor on ATI Mobility Radeon HD 4330
Screen Resolution
1366x768 pixels
Hard Drives
1 tb TOSHIBA (SATA)
PSU
built-in
Case
Dell Laptop
Cooling
built-in
Keyboard
built-in
Mouse
Dell Touchpad/Microsoft Arc Mouse
Other Info
Snake Laptop Skin, Detachable Alfa USB wifi with custom 15dbi antenna (for better signal range)
But this can cause havoc to those that don´t have english as his primary language. ;)
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64Core 2Duo E8400 3.00Ghz2 Gb ddr2 667Mhz dual channelGeForce GT240 512MB GDDR5
Computer Manufacturer/Model Number
Homebrew PC - "Optimus_Prime"
OS
Windows 7 Ultimate x64
CPU
Core 2Duo E8400 3.00Ghz
Motherboard
Gigabyte 945GMC S2-C
Memory
2 Gb ddr2 667Mhz dual channel
Graphics Card(s)
GeForce GT240 512MB GDDR5
Monitor(s) Displays
Samsung SyncMaster 732N Plus
Hard Drives
Samsung 500Gb Sata II HD502HJ
Western Digital 500Gb Sata II WD500AAKS
Western Digital 160Gb IDE
Case
Leadership Gamer Blue Eye II
But this can cause havoc to those that don´t have english as his primary language. ;)


lmao.........oh man you made my day.......:roflmao:
 

My Computer My Computer

At a glance

MS Windows 8Intel Core i5 @ 2.27GHz Arrandale 32nm Techno...8.0GB Dual-Channel DDR3 @ 532MHz (7-7-7-20)ATI Mobility Radeon HD 4300 Series (Dell)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Dell inspiron 1564
OS
MS Windows 8
CPU
Intel Core i5 @ 2.27GHz Arrandale 32nm Technology
Motherboard
Dell Inc. 0M9XW4 (U2E1)
Memory
8.0GB Dual-Channel DDR3 @ 532MHz (7-7-7-20)
Graphics Card(s)
ATI Mobility Radeon HD 4300 Series (Dell)
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Generic PnP Monitor on ATI Mobility Radeon HD 4330
Screen Resolution
1366x768 pixels
Hard Drives
1 tb TOSHIBA (SATA)
PSU
built-in
Case
Dell Laptop
Cooling
built-in
Keyboard
built-in
Mouse
Dell Touchpad/Microsoft Arc Mouse
Other Info
Snake Laptop Skin, Detachable Alfa USB wifi with custom 15dbi antenna (for better signal range)
But this can cause havoc to those that don´t have english as his primary language. ;)


lmao.........oh man you made my day.......:roflmao:
This just shows how stupid I am: I fail to see fun in this.

This is a serious threat, and I agree with Archmage said. This is quite depressing and sad news, unfortunately some users are going to fall in this trap.

Kari
 

My Computer My Computer

At a glance

Windows 10 Pro x64 EN-GB1.6 GHz Intel Core i7-720QM Processor6 GBATI Mobility Radeon HD 5850 Graphics
Computer type
Laptop
Computer Manufacturer/Model Number
HP ENVY 17-1150eg
OS
Windows 10 Pro x64 EN-GB
CPU
1.6 GHz Intel Core i7-720QM Processor
Memory
6 GB
Graphics Card(s)
ATI Mobility Radeon HD 5850 Graphics
Sound Card
Beats sound system with integrated subwoofer
Monitor(s) Displays
17" laptop display, 22" LED and 32" Full HD TV through HDMI
Screen Resolution
1600*900 (1), 1920*1080 (2&3)
Hard Drives
Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm
External: 2TB for backups, 3TB USB3 network drive for media
Cooling
As Envy runs a bit warm, I have it on a Cooler Master pad
Keyboard
Logitech diNovo Media Desktop Laser (bluetooth)
Mouse
Logitech Performance Mouse MX
Internet Speed
50/10 Mbps VDSL
Antivirus
Windows Defender 4.3.9431.0
Browser
Maxthon 3.5.2., IE11
lol

What I mean is... to the ones that speak and read only brazilian portuguese (an example, using my language)... don´t matter if it´s spelled Licence, or License... everyone will hit the "Oh-my-God-I-got-a-virus" button or link... and so, the malware spreads...

Kari hit the point in what I´m saying. Sometimes, people here fall in these little nasty traps even in our language (and badly misspelled, by the way). It´s a pity, but it is good to see that Security enterprises are doing the best to help us. :)
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64Core 2Duo E8400 3.00Ghz2 Gb ddr2 667Mhz dual channelGeForce GT240 512MB GDDR5
Computer Manufacturer/Model Number
Homebrew PC - "Optimus_Prime"
OS
Windows 7 Ultimate x64
CPU
Core 2Duo E8400 3.00Ghz
Motherboard
Gigabyte 945GMC S2-C
Memory
2 Gb ddr2 667Mhz dual channel
Graphics Card(s)
GeForce GT240 512MB GDDR5
Monitor(s) Displays
Samsung SyncMaster 732N Plus
Hard Drives
Samsung 500Gb Sata II HD502HJ
Western Digital 500Gb Sata II WD500AAKS
Western Digital 160Gb IDE
Case
Leadership Gamer Blue Eye II
my apology kari...NO fun intended...
 

My Computer My Computer

At a glance

MS Windows 8Intel Core i5 @ 2.27GHz Arrandale 32nm Techno...8.0GB Dual-Channel DDR3 @ 532MHz (7-7-7-20)ATI Mobility Radeon HD 4300 Series (Dell)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Dell inspiron 1564
OS
MS Windows 8
CPU
Intel Core i5 @ 2.27GHz Arrandale 32nm Technology
Motherboard
Dell Inc. 0M9XW4 (U2E1)
Memory
8.0GB Dual-Channel DDR3 @ 532MHz (7-7-7-20)
Graphics Card(s)
ATI Mobility Radeon HD 4300 Series (Dell)
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Generic PnP Monitor on ATI Mobility Radeon HD 4330
Screen Resolution
1366x768 pixels
Hard Drives
1 tb TOSHIBA (SATA)
PSU
built-in
Case
Dell Laptop
Cooling
built-in
Keyboard
built-in
Mouse
Dell Touchpad/Microsoft Arc Mouse
Other Info
Snake Laptop Skin, Detachable Alfa USB wifi with custom 15dbi antenna (for better signal range)

Attachments

  • Capture.JPG
    Capture.JPG
    173 KB · Views: 7

My Computer My Computer

At a glance

Windows 10 Pro x64 ; Xubuntu x64Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz16GB Corsair Vengance DDR3 @ 661 MHz Dual Cha...EVGA NVidia GTX 560 1024MB
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Golden Mk. I.4
OS
Windows 10 Pro x64 ; Xubuntu x64
CPU
Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz
Motherboard
Gigabyte P55A-UD3R Rev.1. Award BIOS F13
Memory
16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24)
Graphics Card(s)
EVGA NVidia GTX 560 1024MB
Sound Card
Realtek Integrated
Monitor(s) Displays
Dual Samsung SyncMaster 2494HS
Screen Resolution
1920*1080 and 1920*1080
Hard Drives
1*Samsung 840 EVO 120GB SSD;
1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
1*Samsung F1 SpinPoint 1TB;
2*Western Digital 1TB External USB 3.0
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0
PSU
Thermaltake ToughPower QFan 750W
Case
Thermaltake Element S VK60001W2Z
Cooling
Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans
Keyboard
Logitech G110
Mouse
Logitech MX518
They always use license (n.)

You are quite right, Microsoft seems to use the British English spellchecker for UK documents - about 127,000 if I am to believe Google if I search

licence site:microsoft.com.

Post #3 corrected
 

My Computer My Computer

At a glance

Win 7 Ult + Starter, XP Pro +Home, 2kAS, Linu...AMD 64 Athlon X2 , Intel Atom N450, Intel Cel...2.5GB ; 1GB; 2GBNvidia GeForce7000m; Intel; Intel
Computer Manufacturer/Model Number
Acer 7520, Packard Bell dot se, Acer travelmate 2423
OS
Win 7 Ult + Starter, XP Pro +Home, 2kAS, Linux Mint 8, SuperOS
CPU
AMD 64 Athlon X2 , Intel Atom N450, Intel Celeron M 1.50 Ghz
Motherboard
Acer Fuquene
Memory
2.5GB ; 1GB; 2GB
Graphics Card(s)
Nvidia GeForce7000m; Intel; Intel
Sound Card
Realtek AC57
Monitor(s) Displays
17" ;10.1"; 19"
Screen Resolution
1440x900;1024x600;1440x900;
Hard Drives
WD 80, WD 320;
PSU
19v
Case
Laptop
Cooling
Air
Internet Speed
9.7Mb/s down 0.99Mb/s up
Other Info
ISP VIRGINMEDIA 10M cable broadband - D-Link DIR615 wireless router, 3Com OfficeConnect ASDL router used as wireless extender switch
Back
Top