Windows 7 not genuine virus

[4ycr]

I had a laptop in today that when booting up had in the bottom right corner

windows 7 RC 7600
This version of windows is not registered

It would hang just after the login screen with this and then either restart or you get the message explorer.exe would not respond.

It was easy to remove in safe mode but what I noticed is, it corrupted Norton 360 so that if you let it start up it would go further than before but would not be responsive once the desktop icons appeared.

There was no rootkit that I could find and once norton 360 was disabled through msconfig and then removed the laptop runs fine.

Just wondering if anyone else has seen this

 

[Vicenarian]

Haven't seen it yet, but it sure sounds interesting. Thanks for the information.

 

[Techlogon]

Not seen it yet but thanks for the heads up.

I wonder what the purpose of it is unless there was a number to call or a scam to 'buy' a new license?

If it just stops people getting into Windows it is doomed to be quickly eradicated by a restore/format or repair by a tech - maybe just old fashioned mischief?

 

[4ycr]

It did at one point bring up a windows asking you to activate it but the system was so damaged between the virus and Norton that it would not go far enough to allow me to see any more.

If allowed I think it will be just like the fake anti virus malware that will eventually ask for money.

 

[erb]

Am I reading the thread wrong or are you saying this machine has Win 7 build 7600 RC? That was the one you could download for free and then register for a few months back in 2009. It isn't legit. Maybe some other tech put on a boot loader to make it appear legit and now that boot loader is gone?

 

[4ycr]

The machine is fully legit, it's a packard bell wit the COA on the bottom, I never tried to register it but once in safe mode, this never appeared so I went ahead with my normal removal process and once rebooted it was gone and windows was legit.

The virus put this on like the old 2009 version had but windows was fine.

 

[erb]

That is crazy. Maybe they just use that bitmap background with the 7600 RC label to throw you off. Its nice to know in case I encounter this particular virus.