Threat Database Trojans Fake Windows Activation Screen

Fake Windows Activation Screen

"Fake Windows Activation Screen" is a Trojan infection that is disguised as a Windows Activation program. The "Fake Windows Activation Screen" has a professional appearance and displays a message claiming that you need to re-activate your Windows. The "Fake Windows Activation Screen" will also request you to provide personal information such as your name, contact information and credit card details. Do not fall for this scam; cybercriminals could use your credit card details to commit fraud.

File System Details

Fake Windows Activation Screen may create the following file(s):
# File Name Detections
1. %UserProfile%\Application Data\mtl.dll
2. C:\WINDOWS\system32\.exe

Registry Details

Fake Windows Activation Screen may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""


The following messages associated with Fake Windows Activation Screen were found:

"Microsoft Windows Activation
Microsoft Piracy Control

Your copy of Windows was activated by another user. To help reduce software piracy, please re-activate your copy of Windows now. We will ask for your billing details, but your credit card will NOT be charged. You must activate Windows before you can continue to use it. Microsoft is committed to your privacy. For more information,

Do you want to activate Windows now?"


Most Viewed