"Time to activate Windows"...Is it a virus? UPDATED

[Baitball Blogger]

I first saw this message pop up from the icon bar several months ago. About a month earlier I had the laptop at the shop where a new harddrive was installed and software files also reinstalled. I figured the store had forgotten to activate the windows, so I took it back and they had it corrected even before I was half way home.

But the message came up again just now. Like the last time, I lost my Windows wallpaper. The background was replaced with a black background.

This time around, however, instead of responding to the pop up, I went through the virus scanning and registry clean-up and found several problems on a thumbdrive that was connected to the laptop. On the thumbdrive were included backups of old files from the Download folder. I have since cleaned everything up and reestablished the wallpaper.

UPDATE: The warning came back on! It said that I needed to activate windows. That the trial period has expired!

I have Windows 7.

[Scuba]

1. Yes, Windows is a virus, and a bad one at that!

[Baitball Blogger]

2. Not funny!

From what I can find on the internet, it is a virus. But I don't know how to get rid of it. I'm using ESET anti-virus.

[gvstn]

3. It seems a coincidence

That you had a new drive and Windows reinstalled at the shop and now it is coming up illegitimate. I have to say I would suspect the shop of using a non-genuine Windows or is not activating it properly. Removal of wallpaper is one of the limitations Windows puts on copies that aren't activated. I think I would call the shop first to see what they say. Don't mention a virus as I doubt that is the problem--let them explain why Windows isn't activated when you paid for their services to do the re-instillation.

[Baitball Blogger]

4. What is odd is that I purchased the Windows for two other systems and they

are working fine, though I don't use those laptops/desktop as often as I use this one.

[gvstn]

5. Does the exact wording of the error say "Time to Activate Windows"?

Do you see this in the lower right-hand corner? It is the usual that you would see with the wallpaper removed by Windows itself. Which would make me think a genuine Windows message.

http://4.bp.blogspot.com/-LV4oELWyMNg/UOAiOj3_s4I/AAAAAAAACpM/iNfzH5EpZbQ/s400/Not+Genuine+Windows.png

Also try going to Start and right-click on Computer from the right-hand list and select Properties and in that information window scroll down to the bottom to see if it says Windows is activated/genuine or not. If it says activated then it might be a virus.

[Baitball Blogger]

6. It says that Windows is activated and it includes my Product Key.

How do I get rid of this virus?

In time it will lock me out of my computer.

[gvstn]

7. I'm not good at virus removal.

I just want to make sure that we are on the same page. It says Windows is activated and gives your product key and it has a Genuine logo over to the right--I want to verify the Genuine logo so we can be sure that page looks correct and that you have a virus.

Can you give the exact wording of your popup when you get the Time to activate message? I am not finding many hits on that using Google. (I'm looking for some link to Bleeping Computer--which is very good at providing tutorials for removing viruses. If we can find a section of text from your popup window that when put in Google leads to a Bleeping Computer link we can figure out what we are dealing with.) Or if you can provide a link or two that led you to think it was a virus that would be helpful.

[Baitball Blogger]

8. Full message:

Activate Windows Now
The activated period has expired
Click the message to start activation.

The last time this happened I did click the message and it took me to microsoft. Something about the website wasn't convincing so I stopped shy of providing financial info.

- - - -

I just downloaded Superantivirus and removed 89 adware bugs that my ESET didn't catch. I don't know if that will be a permanent fix.

[gvstn]

9. I'll take a look around.

Don't give financial info as I did see something similar to your popup that was a virus trying to get your credit card info. The wording is very similar to Microsoft.

Superantivirus and Malwarebytes are the two aggressive virus scanners that are recommended. I think Malwarebytes makes their free edition a bit harder to find in the last few months but it is still available. I know others in this group are familiar with those programs while I am not but just wanted to let you know the two names that are trusted.

[gvstn]

10. Sorry but one more time I can't find results

Just to be sure it says: The activated period has expired, rather than The activation period has expired? The difference in tense might be important for finding similar problems. Lots of results for activation but none for activated. Activation is probably legit where activated would be a major clue-just have to find someone who also had it.

[Baitball Blogger]

11. You may be right. It may be "activation"

I scratched the information down quickly because I was afraid that msg. would disappear.

For what it's worth, it hasn't turned up since I removed those 89 files using SuperAntispyware software.

I'll know in the morning when I turn the computer on, because the activation msg. takes over.

Thanks for any help you can provide! I'll be calling the laptop repair shop tomorrow to see what they think.

[Earth Bound Misfit]

12. Can you grab a screenshot next time it pops up?

http://www.bleepingcomputer.com/tutorials/how-to-take-and-share-a-screen-shot-in-windows/
http://www.sevenforums.com/tutorials/9717-screenshot-paint.html

[Baitball Blogger]

16. I tried using the snippet tool and was not able to do it because the little window

fades when you touch any key.

If I get another chance before taking it to the shop, I'll snap a picture.

[gvstn]

13. Superantispyware is good.

I just have a tiny problem with them because I used to be an active member of computer forums where SAS messed up many XP computers by removing some critical file. It took them months to remedy the problem. For months, I had to read people's posts where they had a simple problem that was made worse by using that program. It put it in the last resorts category for me unless I was working with someone in a virus removal forum where they were giving me step by step instructions. (There are a couple of forums I would recommend: MajorGeeks and BleepingComputer if you get to that point but they will involve using various programs and reporting your findings and getting advice--time intensive but they do work.) SAS is a perfectly fine program and highly recommended but if I had a virus problem I would use it last. Maybe, I should qualify that and say if I was using XP then I might use it last.

It sounds like your repair shop is legit so ask them and let us know what happens when you boot up in the morning. SAS may have done the trick. I'll be happy to provide any help I can in narrowing down the problem if you still have popups when booting--please also mention if you desktop goes to black again.

[ManiacJoe]

14. Installing a new primary ( C: ) hard drive

can easily trigger the Windows activation system. So can replacing a few other key pieces of hardware.

[Baitball Blogger]

15. I wonder if installing the thumbdrive with old backup files on it, instigated something?

[ManiacJoe]

17. Most likely not.

Maybe if you tried to restore some key system files off the backups....

[Baitball Blogger]

18. The store reformatted and reinstall software.

It's all a pain because I have to start all over again. Though, I think I'll restore one of the old backups, to get me back to speed.

[ManiacJoe]

19. Getting you back up to speed would depend on what you are restoring.

If the store put a new drive into the computer, it had to be formatted, and any software you want on it would need to be officially installed again. No backups will help here.

Since they put in a new drive, if the store did not activate Windows again for you, you will need to do that yourself again.

[Baitball Blogger]

20. They didn't put in a new drive.

They reformatted the old one and installed the basic software. Anti-virus and Internet Explorer. I purchased windows from them the last time I was there. Not sure why I needed to do it, but there was a packaged bundled that made it worth it.

I am not 100% convinced that everything is kosher, however, because the explanation was that the updates were trying to get me to Windows 8. I haven't heard anyone complain about that with Windows 7, so I don't really know if this will be a permanent fix.