'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' Technical Support Scam
The name 'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' Technical Support Scam refers to an Internet campaign that uses corrupted pages to deliver misleading information to French-speaking users and have them call phone lines like 33-970-449-279. The 'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' Technical Support Scam is an adapted version of the 'Microsoft has detected suspicious activity' scam that we have reported earlier. The 'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' messages are similar to the 'Firewall Detected Suspicious Network Connections' pop-ups and the 'All Access To This Device Has Been Revoked' warnings. However, the 'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' Technical Support Scam is facilitated by a Screen Locker Trojan which is reported to run as 'WINDISKUTILITY.EXE' on machines. The program is likely to enter systems via spam messages and compromised copies of shareware. The 'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' Screen Locker is seen to place a layer on the desktop and disable system tools like the registry editor and the task manager. The screen lock message reads:
'Microsoft Windows a détecté des activités suspectes sur cet ordinateur.
En raison d'une violation de sécurité réseau, Microsoft Windows s'est désactivé
Pour activer s'il vous plaît entrer la clé de produit. Ne pas redémarrer votre système, il peut provoquer une défaillance du disque dur ou corrompu les données
contact pour le support gratuit de windows +33 970 449 279 Clé de produit non valide: Copyright 2017. Tous droits réservés.'
Translated into English:
'Microsoft Windows has detected suspicious activity on this computer.
Due to a network security violation, Microsoft Windows was disabled
To activate please enter the product key. Do not reboot your system, it can cause hard drive failure or corrupted data
contact for free support of windows +33 970 449 279 Invalid Product Key: Copyright 2017. All rights reserved.'
PC users who have the misfortune to encounter the 'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' Screen Locker Trojan may notice that the '+33 970 449 279' phone line is listed as a support desk. Do not make calls to the +33 970 449 279 support desk because it is not recognized as a legitimate services provider. The team on the other end of the +33 970 449 279 phone line might suggest users pay for a Windows activation key or pay a fee for using a pirated copy of Windows. Fortunately, PC security analysts have found that the 'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' Screen Locker can be disabled by entering one of the following strings on the text box provided on the lock screen — 'mmmmm,' 'g6r-qrp6-h2,' and 'yt-mq-6w.' You can remove all objects associated with the 'Microsoft Windows a détecté des activités suspectes sur cet ordinateur' by using help from a reputable anti-malware scanner.
