UJEX46

Trojan.Kardphisher is a Trojan horse program that deactivates genuine and previously activated copies of Windows following the infection. Security Company Symantec has warned on the spreading of
Trojan.Kardphisher, and revealed that the malicious program is not a technical masterpiece, but that it is focused on social engineering techniques. The catch is that the malicious code does not actually deactivate genuine copies of Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP, either activated or not.

After compromising a system, the malware becomes active with the first Windows boot and displays a message with the title "Microsoft piracy control" just as in the adjacent image. The Trojan informs the users that their copy was activated by another person and asks them to repeat the activation process.
Source Luis