Tweet
This guide is for the WindowsActivationUpdate and Active Windows Scam program from the Rogue.Tech-Support-Scam family. When this infection is installed it will pretend to install an update on the computer that prompts you to press the OK button. Once you press the OK button, the computer will restart, and when you login, instead of being shown your Windows desktop, you will be shown a fake product activation screen.
Remove the WindowsActivationUpdate and Active Windows Scam (Removal Guide)
This guide is for the WindowsActivationUpdate and Active Windows Scam program from the Rogue.Tech-Support-Scam family. When this infection is installed it will pretend to install an update on the computer that prompts you to press the OK button. Once you press the OK button, the computer will restart, and when you login, instead of being shown your Windows desktop, you will be shown a fake product activation screen.
This screen states that your Windows product key is missing and that you need to enter a new one and press the Active Windows button. My guess is that this button should have been labeled Activate Windows instead.
The fake product activation screen is displayed by changing the Windows Registry Shell configuration so that the scam program's screen is displayed rather than the normal Windows desktop. They do this to scare you into thinking that your computer has a problem and that you will call the listed 1-844-459-8882 number. Once you call the number, these scammers will try to sell you unneeded services and software.
The text of this alert, along with its bad grammar, is:
Customer Support Helpline: 1-844-459-8882
ERROR_LOCAL_USER
BX06DE489_MD9858
PRODUCT KEY MISING.
Active Windows
This screen will also contain various buttons that open a Command prompt or sites to download and install remote control software.
How did the WindowsActivationUpdate and Active Windows Scam get on my computer?
It is important to note that this tech support scam is bundled with and installed by free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers youÂ*CustomÂ*orÂ*AdvancedÂ*installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
As you can see, this program was created purely to scare you into thinking your Windows installation has a problem so that you will then call the listed number. For no reason should you call this number and buy tech support services, and if you have, you should contact your credit card company and dispute the charges. Please use this guide to remove all remnants of the WindowsActivationUpdate and Active Windows Scam from your computer for free.
Array
View Associated WindowsActivationUpdate Files C:\Program Files (x86)\WindowsActivationUpdate\C:\Program Files (x86)\WindowsActivationUpdate\rst30.batC:\Program Files (x86)\WindowsActivationUpdate\test.txtC:\Program Files (x86)\WindowsActivationUpdate\Uninstall.exeC:\Program Files (x86)\WindowsActivationUpdate\Uninstall.iniC:\Program Files (x86)\WindowsActivationUpdate\WindowsActivation.exe
View Associated WindowsActivationUpdate Registry Information HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell C:\Program Files (x86)\WindowsActivationUpdate\WindowsActivation.exeHKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Curre ntVersion\Uninstall\WindowsActivationUpdate
Click here to view the article.
Remove the WindowsActivationUpdate and Active Windows Scam (Removal Guide)
- Tue, 21 Jun 2016 12:31:02 EDT
- Read 723 times
This guide is for the WindowsActivationUpdate and Active Windows Scam program from the Rogue.Tech-Support-Scam family. When this infection is installed it will pretend to install an update on the computer that prompts you to press the OK button. Once you press the OK button, the computer will restart, and when you login, instead of being shown your Windows desktop, you will be shown a fake product activation screen.
This screen states that your Windows product key is missing and that you need to enter a new one and press the Active Windows button. My guess is that this button should have been labeled Activate Windows instead.
The fake product activation screen is displayed by changing the Windows Registry Shell configuration so that the scam program's screen is displayed rather than the normal Windows desktop. They do this to scare you into thinking that your computer has a problem and that you will call the listed 1-844-459-8882 number. Once you call the number, these scammers will try to sell you unneeded services and software.
The text of this alert, along with its bad grammar, is:
Customer Support Helpline: 1-844-459-8882
ERROR_LOCAL_USER
BX06DE489_MD9858
PRODUCT KEY MISING.
Active Windows
This screen will also contain various buttons that open a Command prompt or sites to download and install remote control software.
How did the WindowsActivationUpdate and Active Windows Scam get on my computer?
It is important to note that this tech support scam is bundled with and installed by free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers youÂ*CustomÂ*orÂ*AdvancedÂ*installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
As you can see, this program was created purely to scare you into thinking your Windows installation has a problem so that you will then call the listed number. For no reason should you call this number and buy tech support services, and if you have, you should contact your credit card company and dispute the charges. Please use this guide to remove all remnants of the WindowsActivationUpdate and Active Windows Scam from your computer for free.
Array
View Associated WindowsActivationUpdate Files C:\Program Files (x86)\WindowsActivationUpdate\C:\Program Files (x86)\WindowsActivationUpdate\rst30.batC:\Program Files (x86)\WindowsActivationUpdate\test.txtC:\Program Files (x86)\WindowsActivationUpdate\Uninstall.exeC:\Program Files (x86)\WindowsActivationUpdate\Uninstall.iniC:\Program Files (x86)\WindowsActivationUpdate\WindowsActivation.exe
View Associated WindowsActivationUpdate Registry Information HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell C:\Program Files (x86)\WindowsActivationUpdate\WindowsActivation.exeHKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Curre ntVersion\Uninstall\WindowsActivationUpdate
Click here to view the article.