I have a client computer with a strange message. About two weeks ago, we did some malware cleanup on it and ran a repair installation. The client brought it back to us today because they were getting this message on the user accounts screen:
Victim of an illegal activity, WARNING (1x2011)
You might be in possession of stolen property which could result in you being named in a criminal indictment.
This computer's location has been reported, logged, and your identity along with your personal information has just been transmitted to the proper authorities. You must contact the owner of this computer within 48 hours to prevent from being named in the indictment.
[City], [Province] [Country] [Postal Code]
CDKey: [I should probably leave this out]
After clicking OK, it proceeds to the login screen as normal, then the computer BSODs after about 30 seconds.
I haven't been able to find much information on this message. It looks like some kind of ransomware. We haven't run any malware scans yet. Has anyone seen anything like this?
The computer is an HP Omni100 AIO with Windows 7 Home Premium.
EDIT: I found some more information. This is a rental computer. We've contacted the phone number in the message, which belongs to EasyHome. They told us they put that software on the computer to lock out people who haven't paid their bills.
Edited by Jarmac, 11 September 2014 - 09:20 AM.